English (US)
 
 
 
 
 
 
Event Log Management 101: Consolidation, Archiving, Alerting, Reporting
Learn how you can collect event logs from multiple computers across the network, receive alerts on most critical events and store all events in a compressed format that enables convenient analysis of archived event log data.
Enter your details to register for the webinar:
First Name:
Last Name:
E-mail:
Time Slot:
RegisterCancel

NetWrix Event Log Manager

Event log collection, archiving, real-time alerting and reporting

Report Samples

The following predefined reports are available in the Enterprise edition of the product. You can easily create your custom reports or order them from NetWrix Professional Services. Up to 3 custom reports can be provided at no charge with every purchase.

Name Description
Account Management Shows account management operations: creation and deletion of accounts and groups and group membership.
Administrative Password Resets Shows all admin-initiated password resets.
All Events by Computer Shows all events grouped by computer, filtered by date range and other parameters.
All Events by Date Shows all events grouped by date, filtered by date range and other parameters.
All Events by Source Shows all events grouped by source (e.g. 'Security', 'Application Management'), filtered by date range and other parameters.
All Events by User Shows all events grouped by user, filtered by date range and other parameters.
All Object Access Events by User Shows all object access events, e.g. file and folder access, registry, and other system objects. Object access auditing must be enabled for this report to work.
All System Events Shows events generated by system processes, including startup and shutdown, system time, system failures, and other critical events.
Audit Log Cleared Shows audit trail cleanup operations. Such operations should never be done without good justification and must be carefully reviewed for security and compliance purposes.
Audit Policy Changes Shows changes to audit policy settings. Audit policy shall be clearly defined in every organization and change only after explicit approval by management.
Failed Logon Attempts Shows failed authentication attempts in Active Directory. This report is crucial to security and compliance of every organization.
Remote Desktop Sessions Shows remote desktop sessions, initiated, terminates, and reconnected.
Security Group Membership Changes Security groups control access to data and resources and all changes must be carefully reviewed on a regular basis in order to ensure overall security and sustain compliance with regulations.
Successful User Logons Shows logons made by users. This report is one of the most important security reports and can be used to track user activity during security and compliance reviews.
Password Changes by User Shows password changes initiated by regular users as opposed to password resets performed by administrators and help desk operators.

Current customers: Need more reports? Contact us and we’ll create up to 3 custom reports at no charge.
Microsoft Gold Certified Partner