How can I retrieve old event log from IDS to IEV.

[Pichet Piriyakitkosol]

I want to retrieve the old event log from event store of IDS to display in IEV but I don't know procedure. Please let me know.

[nkhawaja]

it is very simple. when you are defining the device, you can put what date you want the events to be extracted from. if you have defined the device already, then go to the device properties and apply the date/time there (could not remember the exact procedure but it is through the properties of sensor device you added)

thanks

Nadeem

[Pichet Piriyakitkosol]

Thanks very much Nadeem.

[darin.marais]

can this also be achieved with secmon

[nkhawaja]

yes, when you are launching event viewer through secmon, just specify the back dates.