Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

deleting only parts of eventlog possible?

0 views
Skip to first unread message

Fritz Theiss

unread,
Dec 11, 2009, 7:19:01 AM12/11/09
to

hi,

is it possible to delete only parts of either eventlog (i.e. versus
export/import). a customer of me is asking this; maybe he wants to hide some
discleanless ;-).

--
thanks in advance / danke im voraus, fritz
--
Fritz Theiss

Lanwench [MVP - Exchange]

unread,
Dec 11, 2009, 3:36:27 PM12/11/09
to

No, not possible that I'm aware of.


Pegasus [MVP]

unread,
Dec 11, 2009, 4:46:21 PM12/11/09
to


"Fritz Theiss" <Fritz...@discussions.microsoft.com> schrieb im
Newsbeitrag news:41F78A77-D2BF-48CB...@microsoft.com...

Being able to selectively delete records would make the event logger
worthless, if only because it includes the security log which, like a
monitoring camera, is supposed to log all specified security events. I once
caught a sacked server admin's break-in attempt by examining the security
log. An insider had re-enabled the admin's remote access, then disabled the
logging of remote access attempts. What he could not get rid of was the log
of him disabling remote access logging, which is exactly what you're after.

0 new messages