I want to collect windows system reboot log with evtsys by capturing
"EventLog:6006" and "EventLog:6005" log.
But evtsys never send log with EventSource "Eventlog",These logs may be
generated before evtsys service started.
So how to get system boot/shutdown/reboot with evtsys?
Original issue reported on code.google.com by WangXR1...@gmail.com on 8 Jun 2015 at 3:47
Original issue reported on code.google.com by
WangXR1...@gmail.com
on 8 Jun 2015 at 3:47