search

theabraxas / Project-Neith

Project Neith is intended to provide an extensible and modular dashboard which conveys important information concisely and enables actions on monitored systems.
https://abraxas.io
GNU General Public License v3.0
22 stars 2 forks source link

Add Log Viewer for AD Computers #9

Open theabraxas opened 5 years ago

theabraxas commented 5 years ago

Include a panel to pull logs and filter by EventID for the AD Computer

theabraxas commented 5 years ago

There are two commands - Get-WinEvent and Get-EventLog which retrieve windows events. They seem to have pretty large latency when run remotely. Will need to scope the eventlog (*access permission issues around the security log) and type of events and date of events for reasonable performance. Looking up specific events remains fast but broad lookups are not as fast.

Perhaps an alternative setup would allow for a WEF server integration.