Where do i see the task category in event details in LEM?
So I'm assuming you're talking about this thing:
First off, taking a "random sample" from my System, Application and Security logs, most events seem to have this set to "None," so what are you hoping to get from this field?
The one exception to "Almost everything is none" that I saw was the Security Logs. For many of those, though, it looks like this:
In LEM, if I look for this same event:
So the "Event Name" in this case is pretty close to the Task Category. It's pretty clear that the "Process Creation" task and this event in LEM are related, so I'm not sure what having that field normalized would add to the event.
What's the ask here?
Thats the correct field. In the windows event viewer, I see the task category of :MPSSVC Rule-Level Policy Change. (sub category), but in the LEM I do not see this?
Which windows log? Do you have an Event Idea? What application is generating that event? Can you include a screenshot of the event from the Windows Event Viewer?
in the LEM, the 4957 event shows, but I do not see the task category.
This would help in editing the auditing in windows server 2008.
