"Fritz Theiss" <> schrieb im
Newsbeitrag news:41F78A77-D2BF-48CB-B4F3-...
> hi,
>
> is it possible to delete only parts of either eventlog (i.e. versus
> export/import). a customer of me is asking this; maybe he wants to hide
> some
> discleanless ;-).
>
> --
> thanks in advance / danke im voraus, fritz
> --
> Fritz Theiss
>
Being able to selectively delete records would make the event logger
worthless, if only because it includes the security log which, like a
monitoring camera, is supposed to log all specified security events. I once
caught a sacked server admin's break-in attempt by examining the security
log. An insider had re-enabled the admin's remote access, then disabled the
logging of remote access attempts. What he could not get rid of was the log
of him disabling remote access logging, which is exactly what you're after.
|