|
C:\Windows\System32> wevtutil el | findstr RemoteConnection
Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin
Microsoft-Windows-TerminalServices-RemoteConnectionManager/Analytic
Microsoft-Windows-TerminalServices-RemoteConnectionManager/Debug
Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational
To query the events for the event log named “Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational”
C:\Windows\System32> wevtutil qe Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational
The output is in XML format, you can further write scripts to parse the XML output.
|