1. PDQ Deploy & Inventory Help Center
  2. Community
  3. PDQ Inventory
 

Important Notice: On February 29th, this community was put into read-only mode. All existing posts will remain but customers are unable to add new posts or comment on existing. Please feel to join our Community Discord for any questions and discussions.

Scan Profile to look for event log errors on workstations

Avatar
Gary White

Good morning. Is it possible to create a scan profile to be used to review workstations for specific event log errors or warnings?

What I'm trying to accomplish is a way to review domain workstations for group policy processing errors. I have used the Get-Event remote command to review and generate csv files with data for specific events previously, but what I'm hoping to do is to create a scan profile that would add computers to a dynamic collection if found to have specific event log entries.

Thanks for your thoughts.

 

 

0

Comments

6 comments
Date Votes
  • Avatar
    Permanently deleted user

    Thank you for your suggestion. We have an existing internal feature request ticket for this. I have no ETA on when it could be implemented.

    0
  • Avatar
    Gary White

    Thank you for your reply. I will wait and hope added to a future release.

    0
  • Avatar
    Permanently deleted user

    In the meantime I highly recommend Graylog. It's fairly easy to set up and very powerful.

    0
  • Avatar
    Gary White

    Thank you. I will take a look at it.

    0
  • Avatar
    Permanently deleted user

    Good news! This is now possible with Inventory 15 Beta 1's WMI Scanner.

    https://support.pdq.com/hc/en-us/articles/115003468752-Inventory-WMI-Scanner-Usage-Examples#evtx

    https://documentation.pdq.com/PDQInventory/15.0.1.0/wmi-scanner.htm

    0
  • Avatar
    Gary White

    Thank you Colby! I will begin testing this as soon as the new version is available.

    0