Wednesday, 9 July 2014

Advanced XML filtering windows event viewer

Nice link here:

http://blogs.technet.com/b/askds/archive/2011/09/26/advanced-xml-filtering-in-the-windows-event-viewer.aspx

Contains stuff that helps narrow down event filtering on win server

      <QueryList>
           <Query Id="0">
              <Select Path="Security">
                 *[EventData[Data[@Name='SubjectUserName'] and (Data='test9')]]
               </Select>
           </Query>
      </QueryList>


Much better than usual limiting filters

Tuesday, 8 July 2014

Network issues and ping returns strange characters

Had some issues with computer not working correctly on the network. Could not ping NetBIOS name, so presumed it was a DNS issue.

Then whilst pinging ip address I noticed weird ascii characters were returned
http://www.pcreview.co.uk/forums/strange-characters-ping-results-t248058.html

I was led to doing another "netsh winsock reset catalog" command and this resolved it.