Wednesday, July 16, 2014

So how big ARE Windows Logs?


In my last post I mentioned how I was re-writing a few Windows events to cut down on Splunk license issues. In trying to size log management solutions in the past I've looked for lists or rules of thumb when it comes to the size of Windows events but never really found anything. That being the case hopefully someone will find this useful. I ran a query just now in Splunk to get the average byte count per Windows event ID. If you need to figure out log management license sorts of things this could give you a ROM by which to multiply a sampling of your event count against (as in number of logs on one server over 24hrs * number of related servers). After the cut you will find a 'csv' listing the Event Viewer (sourcetype), Event ID (EventCode), and average bytes for that ID. Enjoy. Oh - the average byte count for all of our Windows logs is 630.

sourcetype,EventCode,avg_bytes
WinEventLog:Application,0,422
WinEventLog:Application,1,498
WinEventLog:Security,1,403
WinEventLog:System,1,405
WinEventLog:Application,2,297
WinEventLog:System,2,331
WinEventLog:Application,3,828
WinEventLog:System,3,392
WinEventLog:Application,4,325
WinEventLog:System,4,433
WinEventLog:Application,5,817
WinEventLog:System,5,290
WinEventLog:Application,6,470
WinEventLog:System,6,392
WinEventLog:Application,7,716
WinEventLog:Setup,7,399
WinEventLog:setup,7,406
WinEventLog:Application,8,523
WinEventLog:System,8,654
WinEventLog:Setup,9,365
WinEventLog:System,9,275
WinEventLog:setup,9,372
WinEventLog:Application,10,483
WinEventLog:System,10,505
WinEventLog:Application,11,460
WinEventLog:System,11,353
WinEventLog:System,12,313
WinEventLog:Application,13,532
WinEventLog:System,13,334
WinEventLog:Application,14,649
WinEventLog:System,15,419
WinEventLog:Application,16,532
WinEventLog:System,16,403
WinEventLog:System,17,962
WinEventLog:System,18,463
WinEventLog:Application,19,435
WinEventLog:System,19,486
WinEventLog:Application,20,312
WinEventLog:System,20,365
WinEventLog:Application,22,2278
WinEventLog:System,24,615
WinEventLog:System,26,366
WinEventLog:System,27,401
WinEventLog:System,29,605
WinEventLog:System,32,402
WinEventLog:System,34,353
WinEventLog:System,35,425
WinEventLog:System,36,551
WinEventLog:System,37,433
WinEventLog:System,42,310
WinEventLog:System,46,341
WinEventLog:System,50,394
WinEventLog:Application,53,293
WinEventLog:System,55,599
WinEventLog:System,56,363
WinEventLog:Application,57,542
WinEventLog:System,58,288
WinEventLog:Application,63,546
WinEventLog:Application,64,405
WinEventLog:Application,65,433
WinEventLog:Application,66,436
WinEventLog:System,67,321
WinEventLog:Application,77,471
WinEventLog:System,78,324
WinEventLog:System,79,326
WinEventLog:System,98,372
WinEventLog:Application,100,493
WinEventLog:System,100,278
WinEventLog:Security,101,557
WinEventLog:System,101,412
WinEventLog:Application,102,315
WinEventLog:Application,103,447
WinEventLog:System,103,422
WinEventLog:Application,104,388
WinEventLog:System,104,279
WinEventLog:Application,105,947
WinEventLog:Application,107,312
WinEventLog:System,108,550
WinEventLog:System,109,305
WinEventLog:Application,111,302
WinEventLog:Application,112,289
WinEventLog:Application,114,326
WinEventLog:Application,117,246
WinEventLog:Application,119,428
WinEventLog:System,121,369
WinEventLog:System,129,516
WinEventLog:Application,131,379
WinEventLog:Application,135,228
WinEventLog:System,139,347
WinEventLog:System,142,387
WinEventLog:Application,145,218
WinEventLog:Application,146,406
WinEventLog:System,146,410
WinEventLog:Application,148,519
WinEventLog:Application,151,520
WinEventLog:Application,152,524
WinEventLog:Application,155,550
WinEventLog:System,157,249
WinEventLog:Application,158,263
WinEventLog:Application,164,380
WinEventLog:Application,200,299
WinEventLog:Application,208,536
WinEventLog:Application,216,401
WinEventLog:Application,256,350
WinEventLog:Application,258,329
WinEventLog:Application,262,324
WinEventLog:Application,266,300
WinEventLog:Application,267,310
WinEventLog:Application,272,278
WinEventLog:Application,274,283
WinEventLog:Application,275,292
WinEventLog:Application,282,291
WinEventLog:Application,300,301
WinEventLog:Application,301,372
WinEventLog:Application,302,314
WinEventLog:Application,325,448
WinEventLog:Application,326,548
WinEventLog:Application,327,550
WinEventLog:System,333,373
WinEventLog:Application,334,452
WinEventLog:Application,401,276
WinEventLog:Application,452,311
WinEventLog:Application,453,311
WinEventLog:Application,482,692
WinEventLog:Application,489,600
WinEventLog:Application,500,350
WinEventLog:System,500,341
WinEventLog:Application,501,446
WinEventLog:System,508,333
WinEventLog:Application,510,465
WinEventLog:Application,513,441
WinEventLog:Security,515,432
WinEventLog:Security,516,399
WinEventLog:Security,528,710
WinEventLog:Security,529,662
WinEventLog:Security,531,683
WinEventLog:Security,535,683
WinEventLog:Security,537,672
WinEventLog:Security,538,393
WinEventLog:Security,539,664
WinEventLog:Security,540,727
WinEventLog:Security,551,381
WinEventLog:Security,552,777
WinEventLog:Security,560,993
WinEventLog:Security,562,413
WinEventLog:Security,563,661
WinEventLog:Security,564,384
WinEventLog:Security,566,816
WinEventLog:Security,567,531
WinEventLog:Security,576,612
WinEventLog:Security,577,615
WinEventLog:Security,578,651
WinEventLog:Security,592,488
WinEventLog:Security,593,448
WinEventLog:Security,600,719
WinEventLog:Application,605,432
WinEventLog:Application,653,286
WinEventLog:Application,654,284
WinEventLog:Application,656,688
WinEventLog:Application,657,650
WinEventLog:Security,672,666
WinEventLog:Security,673,492
WinEventLog:Security,675,449
WinEventLog:Security,680,406
WinEventLog:Security,682,454
WinEventLog:Security,683,456
WinEventLog:Security,697,508
WinEventLog:Application,700,469
WinEventLog:Directory Service,700,348
WinEventLog:Application,701,470
WinEventLog:Directory Service,701,557
WinEventLog:Application,753,350
WinEventLog:Application,754,335
WinEventLog:Application,800,299
WinEventLog:Application,801,387
WinEventLog:Security,861,606
WinEventLog:Application,900,312
WinEventLog:Application,902,310
WinEventLog:Application,903,294
WinEventLog:Application,906,604
WinEventLog:Application,912,662
WinEventLog:Application,958,371
WinEventLog:Application,1000,446
WinEventLog:System,1000,421
WinEventLog:Application,1001,900
WinEventLog:System,1001,442
WinEventLog:Application,1002,5115
WinEventLog:Application,1003,1352
WinEventLog:Application,1005,362
WinEventLog:Application,1006,382
WinEventLog:System,1006,534
WinEventLog:Application,1007,336
WinEventLog:Application,1008,3738
WinEventLog:Application,1011,396
WinEventLog:System,1013,394
WinEventLog:Application,1014,455
WinEventLog:System,1014,406
WinEventLog:Application,1015,839
WinEventLog:Application,1016,789
WinEventLog:System,1020,314
WinEventLog:Application,1022,510
WinEventLog:Application,1025,494
WinEventLog:Application,1026,1544
WinEventLog:Application,1029,504
WinEventLog:Application,1030,446
WinEventLog:System,1030,751
WinEventLog:Application,1031,390
WinEventLog:Application,1033,570
WinEventLog:Application,1034,370
WinEventLog:Application,1035,524
WinEventLog:Application,1036,558
WinEventLog:Application,1038,536
WinEventLog:Application,1039,983
WinEventLog:Application,1040,544
WinEventLog:Application,1041,319
WinEventLog:Application,1042,379
WinEventLog:Application,1044,335
WinEventLog:Application,1050,551
WinEventLog:Application,1053,450
WinEventLog:System,1058,942
WinEventLog:System,1063,329
WinEventLog:Application,1066,1019
WinEventLog:System,1074,602
WinEventLog:System,1085,457
WinEventLog:Security,1100,304
WinEventLog:Application,1103,501
WinEventLog:Security,1105,404
WinEventLog:Application,1106,595
WinEventLog:System,1111,435
WinEventLog:System,1112,618
WinEventLog:System,1116,1055
WinEventLog:System,1119,491
WinEventLog:Application,1130,345
WinEventLog:System,1150,398
WinEventLog:Application,1174,314
WinEventLog:System,1196,603
WinEventLog:Application,1202,2208
WinEventLog:Application,1213,419
WinEventLog:Application,1305,887
WinEventLog:Application,1306,1853
WinEventLog:Application,1309,3804
WinEventLog:Application,1314,1268
WinEventLog:Application,1315,1293
WinEventLog:Application,1316,6288
WinEventLog:Application,1344,725
WinEventLog:System,1376,339
WinEventLog:Application,1485,323
WinEventLog:System,1500,437
WinEventLog:System,1502,416
WinEventLog:System,1503,453
WinEventLog:Application,1509,339
WinEventLog:Application,1511,498
WinEventLog:Application,1512,585
WinEventLog:Application,1517,780
WinEventLog:Application,1525,481
WinEventLog:Application,1530,952
WinEventLog:Application,1531,346
WinEventLog:Application,1532,333
WinEventLog:Application,1538,432
WinEventLog:System,1578,819
WinEventLog:System,1579,726
WinEventLog:Application,1704,304
WinEventLog:System,2000,547
WinEventLog:Application,2001,353
WinEventLog:System,2001,815
WinEventLog:System,2002,442
WinEventLog:Application,2003,317
WinEventLog:Application,2004,431
WinEventLog:System,2004,683
WinEventLog:Application,2005,317
WinEventLog:Application,2006,298
WinEventLog:Application,2011,410
WinEventLog:Application,2012,417
WinEventLog:System,2013,280
WinEventLog:Application,2034,394
WinEventLog:Application,2070,974
WinEventLog:Application,2080,865
WinEventLog:Application,2095,403
WinEventLog:Application,2100,609
WinEventLog:Application,2105,508
WinEventLog:Application,2106,525
WinEventLog:Application,2137,876
WinEventLog:Application,2138,979
WinEventLog:Application,2159,463
WinEventLog:Application,2283,516
WinEventLog:Application,2330,528
WinEventLog:Application,2391,359
WinEventLog:Application,2501,485
WinEventLog:Application,2601,673
WinEventLog:Application,2604,636
WinEventLog:Application,2803,458
WinEventLog:Application:MSSQLServer,2803,458
WinEventLog:Application,2915,520
WinEventLog:Application,3004,551
WinEventLog:Application,3402,378
WinEventLog:Application:MSSQLServer,3402,378
WinEventLog:Application,3406,378
WinEventLog:Application,3407,375
WinEventLog:Application,3408,344
WinEventLog:Application,3409,285
WinEventLog:Application,3454,393
WinEventLog:Application:MSSQLServer,3454,404
WinEventLog:Application,3455,414
WinEventLog:Application,3563,303
WinEventLog:Application,3570,325
WinEventLog:Application,4001,2827
WinEventLog:Application,4002,422
WinEventLog:Application,4004,332
WinEventLog:Application,4097,455
WinEventLog:Application,4098,553
WinEventLog:Application,4101,273
WinEventLog:System,4102,315
WinEventLog:System,4105,1103
WinEventLog:Application,4111,346
WinEventLog:Application,4112,342
WinEventLog:Application,4114,9112
WinEventLog:Application,4140,871
WinEventLog:System,4200,404
WinEventLog:System,4201,362
WinEventLog:Application,4202,811
WinEventLog:System,4227,769
WinEventLog:System,4319,425
WinEventLog:Application,4400,497
WinEventLog:System,4400,322
WinEventLog:Security,4608,393
WinEventLog:Application,4610,2572
WinEventLog:Security,4611,596
WinEventLog:Security,4616,917
WinEventLog:Security,4624,990
WinEventLog:Application,4625,530
WinEventLog:Security,4625,1090
WinEventLog:Application,4626,543
WinEventLog:Security,4634,656
WinEventLog:Security,4647,561
WinEventLog:Security,4648,1185
WinEventLog:Security,4656,949
WinEventLog:Security,4657,933
WinEventLog:Security,4659,879
WinEventLog:Security,4660,622
WinEventLog:Security,4661,1538
WinEventLog:Security,4662,901
WinEventLog:Security,4663,827
WinEventLog:Security,4664,621
WinEventLog:Security,4665,574
WinEventLog:Security,4666,757
WinEventLog:Security,4667,541
WinEventLog:Security,4670,828
WinEventLog:Security,4672,675
WinEventLog:Security,4673,717
WinEventLog:Security,4674,965
WinEventLog:Security,4675,678
WinEventLog:Security,4688,1713
WinEventLog:Security,4689,550
WinEventLog:Security,4690,627
WinEventLog:Security,4692,627
WinEventLog:Security,4696,789
WinEventLog:Security,4698,2176
WinEventLog:Security,4699,2174
WinEventLog:Application,4700,2248
WinEventLog:Security,4700,2855
WinEventLog:Security,4701,2857
WinEventLog:Security,4702,2774
WinEventLog:Security,4717,583
WinEventLog:Security,4718,585
WinEventLog:Security,4720,1201
WinEventLog:Security,4722,567
WinEventLog:Security,4723,602
WinEventLog:Security,4724,595
WinEventLog:Security,4725,560
WinEventLog:Security,4727,695
WinEventLog:Security,4728,817
WinEventLog:Security,4729,749
WinEventLog:Security,4731,718
WinEventLog:Security,4732,670
WinEventLog:Security,4733,674
WinEventLog:Security,4734,637
WinEventLog:Security,4735,677
WinEventLog:Security,4737,708
WinEventLog:Security,4738,1059
WinEventLog:Security,4740,603
WinEventLog:Security,4741,1199
WinEventLog:Security,4742,1163
WinEventLog:Security,4755,708
WinEventLog:Security,4756,850
WinEventLog:Security,4767,551
WinEventLog:Security,4768,1103
WinEventLog:Security,4769,813
WinEventLog:Security,4770,763
WinEventLog:Security,4771,1125
WinEventLog:Security,4774,434
WinEventLog:Security,4776,508
WinEventLog:Security,4778,732
WinEventLog:Security,4779,745
WinEventLog:Security,4780,1219
WinEventLog:Security,4781,640
WinEventLog:Security,4793,610
WinEventLog:Security,4800,461
WinEventLog:Security,4801,465
WinEventLog:Application,4879,382
WinEventLog:Security,4886,479
WinEventLog:Security,4887,600
WinEventLog:Security,4902,368
WinEventLog:Security,4904,628
WinEventLog:Security,4905,628
WinEventLog:Security,4907,952
WinEventLog:Application,4912,1415
WinEventLog:Security,4931,698
WinEventLog:Security,4932,733
WinEventLog:Security,4933,748
WinEventLog:Security,4946,516
WinEventLog:Security,4948,520
WinEventLog:Security,4954,377
WinEventLog:Security,4956,378
WinEventLog:Security,4957,507
WinEventLog:Application,4965,1094
WinEventLog:Security,4985,696
WinEventLog:Application,4999,510
WinEventLog:Application,5000,322
WinEventLog:System,5000,279
WinEventLog:Application,5001,300
WinEventLog:Application,5002,301
WinEventLog:Application,5003,478
WinEventLog:Application,5007,341
WinEventLog:Application,5013,1425
WinEventLog:Security,5024,327
WinEventLog:Application,5026,714
WinEventLog:Security,5031,471
WinEventLog:Security,5033,326
WinEventLog:System,5050,285
WinEventLog:Security,5056,467
WinEventLog:Security,5058,880
WinEventLog:Security,5061,706
WinEventLog:System,5074,424
WinEventLog:Application,5084,341
WinEventLog:Application:MSSQLServer,5084,364
WinEventLog:Security,5136,975
WinEventLog:Security,5137,836
WinEventLog:Security,5140,699
WinEventLog:Security,5141,897
WinEventLog:Security,5143,896
WinEventLog:Security,5145,1051
WinEventLog:Security,5154,730
WinEventLog:Security,5157,737
WinEventLog:Security,5158,692
WinEventLog:System,5186,482
WinEventLog:Application,5197,385
WinEventLog:Security,5447,1935
WinEventLog:Security,5449,805
WinEventLog:Security,5451,1160
WinEventLog:Security,5463,385
WinEventLog:Application,5551,632
WinEventLog:Application,5553,697
WinEventLog:Application,5555,3567
WinEventLog:Application,5586,603
WinEventLog:Application,5604,379
WinEventLog:Application,5605,560
WinEventLog:Application,5611,413
WinEventLog:Application,5615,341
WinEventLog:Application,5617,357
WinEventLog:System,5719,905
WinEventLog:System,5722,440
WinEventLog:System,5723,1561
WinEventLog:System,5779,410
WinEventLog:System,5782,403
WinEventLog:System,5805,375
WinEventLog:System,5807,1726
WinEventLog:System,5810,2234
WinEventLog:Application,6003,357
WinEventLog:System,6005,260
WinEventLog:System,6006,260
WinEventLog:System,6009,284
WinEventLog:Application,6012,421
WinEventLog:System,6013,258
WinEventLog:Application,6019,381
WinEventLog:System,6037,542
WinEventLog:System,6038,878
WinEventLog:Application,6126,672
WinEventLog:Security,6144,560
WinEventLog:Security,6145,545
WinEventLog:Application,6207,1199
WinEventLog:Security,6272,1424
WinEventLog:Security,6273,1523
WinEventLog:Security,6278,1476
WinEventLog:Security,6281,590
WinEventLog:Application:MSSQLServer,6290,279
WinEventLog:Application:MSSQLServer,6299,358
WinEventLog:Application,6398,1163
WinEventLog:Application,6482,1405
WinEventLog:Application,6701,390
WinEventLog:Application,6702,372
WinEventLog:Application,6704,436
WinEventLog:Application,6705,438
WinEventLog:Application,6808,667
WinEventLog:Application,6812,651
WinEventLog:Application,6814,1022
WinEventLog:Application,6815,680
WinEventLog:Application,6816,747
WinEventLog:Application,6817,665
WinEventLog:Application,6818,685
WinEventLog:System,7000,323
WinEventLog:Application,7001,355
WinEventLog:System,7001,371
WinEventLog:System,7002,344
WinEventLog:Application,7003,325
WinEventLog:Application,7006,332
WinEventLog:System,7024,415
WinEventLog:System,7026,398
WinEventLog:System,7031,400
WinEventLog:System,7034,297
WinEventLog:ForwardedEvents,7035,388
WinEventLog:System,7035,322
WinEventLog:ForwardedEvents,7036,341
WinEventLog:System,7036,384
WinEventLog:ForwardedEvents,7040,411
WinEventLog:System,7040,466
WinEventLog:System,7042,553
WinEventLog:System,7045,605
WinEventLog:Application,7078,1392
WinEventLog:Application,7079,322
WinEventLog:Application,7403,493
WinEventLog:Application,7493,733
WinEventLog:Application,7557,845
WinEventLog:Application,7701,486
WinEventLog:System,8003,437
WinEventLog:System,8019,1392
WinEventLog:System,8021,655
WinEventLog:System,8032,355
WinEventLog:Application,8088,395
WinEventLog:Application,8090,407
WinEventLog:Application,8128,516
WinEventLog:Application,8194,458
WinEventLog:Application,8197,495
WinEventLog:Application,8210,491
WinEventLog:Application,8215,409
WinEventLog:Application,8217,385
WinEventLog:Security,8222,896
WinEventLog:Application,8224,281
WinEventLog:Application,8225,347
WinEventLog:Application,8227,333
WinEventLog:Application,8230,739
WinEventLog:Application,8245,391
WinEventLog:Application,8280,386
WinEventLog:Application,8306,839
WinEventLog:Application,8312,898
WinEventLog:Application,8528,603
WinEventLog:Application,8560,444
WinEventLog:Application,8561,452
WinEventLog:Application:MSSQLServer,9002,386
WinEventLog:Application,9003,330
WinEventLog:Application,9009,301
WinEventLog:Application,9010,524
WinEventLog:System,9014,312
WinEventLog:Application,9017,447
WinEventLog:Application,9018,718
WinEventLog:Application,9025,466
WinEventLog:Application,9214,347
WinEventLog:Application,9217,456
WinEventLog:Application,9235,305
WinEventLog:Application,9646,459
WinEventLog:Application,9661,330
WinEventLog:Application,9666,324
WinEventLog:Application,9688,291
WinEventLog:Application,9692,359
WinEventLog:Application,9826,688
WinEventLog:Application,9875,518
WinEventLog:Application,9877,439
WinEventLog:Application,10000,555
WinEventLog:Application,10001,366
WinEventLog:System,10004,375
WinEventLog:Application,10005,334
WinEventLog:System,10009,354
WinEventLog:Application,10010,416
WinEventLog:System,10010,432
WinEventLog:Application,10012,535
WinEventLog:System,10016,766
WinEventLog:Application,10024,512
WinEventLog:Application,10025,594
WinEventLog:System,10028,502
WinEventLog:System,10148,467
WinEventLog:System,10149,493
WinEventLog:Application:MSSQLServer,10311,315
WinEventLog:Application,11006,2823
WinEventLog:System,11160,1239
WinEventLog:System,11166,1300
WinEventLog:Application,11707,364
WinEventLog:Application,11724,347
WinEventLog:Application,11728,407
WinEventLog:Application,12014,471
WinEventLog:Application,12015,468
WinEventLog:Application,12017,376
WinEventLog:Application,12018,476
WinEventLog:Application,12288,373
WinEventLog:Application,12289,372
WinEventLog:Application,12293,431
WinEventLog:System,12294,589
WinEventLog:Application,12321,294
WinEventLog:Application,12325,391
WinEventLog:Application,12339,625
WinEventLog:Application,12344,446
WinEventLog:System,12503,299
WinEventLog:System,12517,268
WinEventLog:Application,13051,308
WinEventLog:System,14554,356
WinEventLog:System,15021,372
WinEventLog:Application,15223,312
WinEventLog:Application,15268,286
WinEventLog:Application:MSSQLServer,15268,262
WinEventLog:Application,16022,364
WinEventLog:Application,16240,344
WinEventLog:Application,16241,389
WinEventLog:Application,16384,359
WinEventLog:Security,16391,519
WinEventLog:Application:MSSQLServer,17051,268
WinEventLog:Application,17055,321
WinEventLog:Application,17069,451
WinEventLog:Application:MSSQLServer,17069,437
WinEventLog:Application,17101,288
WinEventLog:Application:MSSQLServer,17101,259
WinEventLog:Application,17103,277
WinEventLog:Application:MSSQLServer,17103,253
WinEventLog:Application,17104,283
WinEventLog:Application:MSSQLServer,17104,259
WinEventLog:Application,17110,285
WinEventLog:Application:MSSQLServer,17110,540
WinEventLog:Application,17111,360
WinEventLog:Application:MSSQLServer,17111,348
WinEventLog:Application,17115,289
WinEventLog:Application:MSSQLServer,17115,285
WinEventLog:Application,17125,433
WinEventLog:Application,17126,366
WinEventLog:Application,17136,282
WinEventLog:Application,17137,327
WinEventLog:Application:MSSQLServer,17137,330
WinEventLog:Application,17162,376
WinEventLog:Application,17164,335
WinEventLog:Application,17166,404
WinEventLog:Application,17176,452
WinEventLog:Application,17201,344
WinEventLog:Application:MSSQLServer,17401,401
WinEventLog:Application,17573,404
WinEventLog:Application:MSSQLServer,17573,365
WinEventLog:Application,17663,369
WinEventLog:Application:MSSQLServer,17836,416
WinEventLog:Application,17890,451
WinEventLog:Application,18265,665
WinEventLog:Application:MSSQLServer,18265,637
WinEventLog:Application,18268,584
WinEventLog:Application:MSSQLServer,18268,584
WinEventLog:Application:MSSQLServer,18270,715
WinEventLog:Application,18453,408
WinEventLog:Application:MSSQLServer,18453,418
WinEventLog:Application,18454,375
WinEventLog:Application:MSSQLServer,18454,371
WinEventLog:Application,18456,433
WinEventLog:Application:MSSQLServer,18456,402
WinEventLog:Application:MSSQLServer,18496,285
WinEventLog:Application,19030,298
WinEventLog:Application,20000,349
WinEventLog:System,20001,481
WinEventLog:System,20003,449
WinEventLog:Application,20097,348
WinEventLog:Application,20102,2244
WinEventLog:Application,20154,314
WinEventLog:System,20209,554
WinEventLog:System,20250,383
WinEventLog:System,20266,447
WinEventLog:System,20272,641
WinEventLog:System,20274,380
WinEventLog:System,20275,342
WinEventLog:Application,20400,641
WinEventLog:Application,20517,592
WinEventLog:Application,20530,364
WinEventLog:Application,26018,325
WinEventLog:Application,26022,303
WinEventLog:Application,26023,340
WinEventLog:Application,26048,362
WinEventLog:Security,26401,519
WinEventLog:Application:MSSQLServer,28005,423
WinEventLog:Application,31003,866
WinEventLog:Application,31314,598
WinEventLog:Application,32092,369
WinEventLog:Application:MSSQLServer,33205,1426
WinEventLog:System,36870,433
WinEventLog:System,36874,470
WinEventLog:System,36882,537
WinEventLog:System,36885,755
WinEventLog:System,36886,603
WinEventLog:System,36887,299
WinEventLog:System,36888,337
WinEventLog:System,40960,534
WinEventLog:System,40961,353
WinEventLog:Application,41015,279
WinEventLog:System,45058,380
WinEventLog:Application:MSSQLServer,49904,337
WinEventLog:Application,50008,642
WinEventLog:Application,50009,642
WinEventLog:System,50036,345
WinEventLog:System,50037,370
WinEventLog:Application,50079,306
WinEventLog:System,51046,347
WinEventLog:System,51047,372
WinEventLog:Application,58100,607
WinEventLog:Application,58101,624
WinEventLog:Application,58105,693
WinEventLog:Application,58107,661
WinEventLog:Application,63105,492
WinEventLog:Application,63109,346

No comments:

Post a Comment