Quantcast
Channel: General Discussion
Viewing all articles
Browse latest Browse all 204

List of available indexes for EventIDs

$
0
0

Is there a list of index values for say Windows Security EventIDs?  

So if I wanted to extract the process name from EventID 4625.

EXTRACT_TOKEN(Strings,18,'|') AS ProcessName

Just wondering if there was a list of values somewhere.  That I can use in place of 18 in the code above.  Thanks


Viewing all articles
Browse latest Browse all 204

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>