What is FullEventLogView and how to use it?

  

FullEventLogView is a tool that allows admins to view all the event details from the event log collected from a local or remote system. It performs the same function as the Windows Event Viewer, but is easier to launch and displays all the events and their details in one place.

How to use FullEventLogView?

This tool can be launched by running an executable file named FullEventLogView.exe. This opens a window which displays an up-to-date table of all the events that have been recorded on the system. The table gives information such as event ID, the channel, the severity level of the event and a description. This tool can also help monitor events on remote computers, and can read and collect events from .evtx files. You can export all the events or selected events in different formats such as HTML, TXT, CSV and XML.

Why use FullEventLogView?

This simple tool can help admins find all the events in one place without having to check Windows Event Viewer. Regularly monitoring all the events on your network can help detect a security threat or a security loophole that could lead attackers into your network.

ADAudit Plus is an Active Directory auditing tool that does an even better job at auditing the event log. Though FullEventLogView lists all the events from the Event Viewer, sifting through so many logs to find potential security threats is a tedious and time-consuming process. ADAudit Plus goes a step further and processes these logs to generate audit reports, which are comprehensive and user-friendly. Also, ADAudit Plus uses User Behavior Analytics technology to raise alerts if it detects any unexpected change in the network. Here is a sample report from ADAudit Plus on recent user logon activity:

This report provides enough information for an admin to decide whether or not any of the user logons are suspicious. One of the ways the admin can do it is to check the logon time for every user mentioned in the report. This report can be accessed on ADAudit Plus by navigating to Reports > User Logon Reports > Recent User Logon Activity.

Download ManageEngine's ADAudit Plus, a real-time Active Directory auditing tool that offers 200+ reports and email alerts. It is a useful tool to understand employee behavior with regards to IT, to thwart insider and outsider attacks, and also for compliance purposes.