WinEvents / DSC

This topic contains 2 replies, has 2 voices, and was last updated by

 
Participant
2 years, 4 months ago.

  • Author
    Posts
  • #44352

    Participant
    Points: 0
    Rank: Member

    We use splunk to ingest Windows Event Logs. How do I determine via the event logs when a machine is in the desired state or not. Also, how to I determine if there were/are errors in the DSC configuration for a particular machine by examining its event logs. I would like to be able to have splunk generate a dashboard that shows me a history of each machine so that we can determine/alert when desired state is not being met.

    Thanks

  • #44384

    Keymaster
    Points: 1,619
    Helping HandTeam Member
    Rank: Community Hero

    "How do I determine via the event logs when a machine is in the desired state or not."

    I'm not sure. Do you mean, "we're using DSC, is there anything in the event log that DSC creates that lets me know the machine is compliant or not?"

    Have you looked at the Operational, Debug, and Analytic logs for DSC?

  • #44397

    Participant
    Points: 0
    Rank: Member

    Yes, but I am looking for specifics, like 4201 = All Ok, etc. I would like to be able to pull and alert based on Event ID from the DSC Event logs if possible.

The topic ‘WinEvents / DSC’ is closed to new replies.