1.0.0

What's Changed

• CI builds by @dkhokhlov in #1

New Contributors

• @dkhokhlov made their first contribution in #1

Full Changelog: 0.3.3...1.0.0

2bf543b35fabd041a8e1bdcdbeb59efcbcb38208ab85619b4d922534597ea141 winevt-tailer.exe

0.3.4

• fix: in "agent child" mode tailer log should go to C:\ProgramData\logs

Full Changelog: 0.3.3...0.3.4

e50382fe33196471ff3e659910a965288408c8da30492b030f17f22f77f8f9b4 winevt-tailer.exe

beta 4

• fixed integration with LogDNA (Mezmo) agent

Full Changelog: 0.3.2...0.3.3

8245041e415a5cfb0ec8882e133c64f13d7cacbf02ac6d8b734b601d1ef402c4 winevt-tailer.exe

beta 3

• fixed and optimized xml_to_json transform,

Full Changelog: 0.3.1...0.3.2

af683009314b9ff4da89215053234dd979e46487fccf72959751e3e90629f8b2 winevt-tailer.exe

beta 2

• "-t" transforms path option for external transforms
• readme

Full Changelog: 0.2.1...0.3.1

6cd81affe0503640e1b7563dcbc76475d0ce0f4d745fcbc95a48dc7bc49b9ab4 winevt-tailer.exe

beta 1

• added windows service support - now can self install and run as windows service
• to install as windows service:

winevt-tailer -i
or
winevt-tailer -i <CLI args>

• functionally this service will be equivalent to CLI: winevt-tailer <CLI args>
• to change args - just call the same "-i" command again with different set of CLI args.
• service logs go to c:/ProgramData/logs :

    windows_tail1.log          -- Windows events in one-line-JSON format, ready to be streamed by Mazmo Agent 
    winevt-tailer_tail1.log    -- service instance log

where 'tail1' - default logical tailer instance name, controlled by "-n" cli arg

• to uninstall:
  winevt-tailer -u

alpha 1

Fully functional.
Notes:

• in addition to console (stdout) tailer now outputs to c:/ProgramData/logs/windows-tailer1.log", configurable

Examples:

• Dump 100 last events from System, Application and Security channels:

  • winevt-tailer.exe

• Start tailing System, Application and Security channels with 10 events lookback and persistent state:

  • winevt-tailer.exe -f -b 10 -p

• Dump effective configuration to console that can be used as config file:

  • winevt-tailer.exe -e -b 10 -p