Create Logon Event in Event Log

SCENARIO

You don't like how the Windows Security Log records logon events. You want to create your own logon events and record information that you find useful.

Pull Specific events from event logs on multiple remote computers

SCENARIO

You want to get a specific event from multiple remote computers.  For example, you want to find 1074 events in the System log, but you want to pull those events from a bunch of computers.

Using Analytic and Debug Logs

It's common for IT administrators to use the native Windows logs to search for problems.  Two of the most commonly used logs are the "System" and the "Application" logs.  However, not everyone takes advantage of the the other built in operational logs.  When you go to event viewer, you can expand "Applications and Services Logs" to reveal a vast array of logs. Many of them are empty, but many of them are capturing useful data that can help you discover what is going on with your computer.

For more information on what each of these logs and log types are visit this link https://technet.microsoft.com/en-us/library/cc722404.aspx

In this post, I want to talk about the analytic and debug logs.  The Windows Logs give you information across your system.  It will show you hardware events, system events, security events, application events, etc.  It will do this for all sorts of components and application.  The Applications and Services Logs will drill into individual components and report only on those.