WindowsEventLogReader

Description

Reads Windows Event Log data as XML content having been generated by ConsumeWindowsEventLog, ParseEvtx, etc. (see Additional Details) and creates Record object(s). If the root tag of the input XML is ‘Events’, the child content is expected to be a series of ‘Event’ tags, each of which will constitute a single record. If the root tag is ‘Event’, the content is expected to be a single ‘Event’ and thus a single record. No other root tags are valid. Only events of type ‘System’ are currently supported.

Tags

event, log, parser, reader, record, windows, xml

State management

This component does not store state.

Restricted

This component is not restricted.

System Resource Considerations

This component does not specify system resource considerations.

Language: English