Send Knowledge Base Article
The article has been sent to your inbox successfully.
We never share your data
Exporting information on account lockout events
Can I export information on account lockout events for audit purposes? WE need to export information about tracked lockouts.
KB1271 | Last review: Jul 31, 2017 | Netwrix Auditor for Windows Server, Netwrix Account Lockout Examiner | 4.0 and above
|Question||Can I export information on account lockout events for audit purposes?|
|Answer||NetWrix Account Lockout Examiner console does not have the Export feature. However all lockout information is stored in the allinfo.xml file located in the product installation directory. It can be easily parsed by third-party tool or script to get required information. However account names are not sotred in the allinfo.xml, all accounts are referred to as SIDs.
NetWrix also has another product called NetWrix Event Log Manager for this purpose. This product is able to collect event log entries from multiple computers across the network and centrally store all events in a central location in a compressed format.
For more information, refer to the following link: http://www.netwrix.com/event_log_archiving_consolidation_freeware.html
Was this information helpful?