Review Past Event Log Entries

Netwrix Auditor Event Log Manager collects event log entries and stores them to the Audit Archive. To review past events, do the following:

  1. On the main Netwrix Auditor Event Log Manager page, click View next to View collected events.
  2. In the Netwrix Auditor Event Viewer window, complete the following to narrow results:

    Option Description
    Monitoring plan Select the monitoring plan that audits desired event log entries.
    Computer If you have several items in the monitoring plan, adjust a computer.
    Event log Select event log that contains desired entries.
    From... To... Specify the time range for which you want to retrieve past audit data.