Product manual

GFI EventsManager 5 Collecting Event Logs | 118
Screenshot 84: Enabling GFI LanGuard logging through the registry
3. Go to the following registry key and edit the value to enable event logging:
Windows
®
x86 platforms:
HKEY_LOCAL_MACHINE\SOFTWARE\GFI\LNSS[n]\Config
Set value of REG_DWORD EventLog to 1
Windows
®
x64 platforms:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\GFI\LNSS[n]\Config
Set value of REG_DWORD EventLog to 1
Important
[n] is the major version number of GFI LanGuard.
Example: HKEY_LOCAL_MACHINE\SOFTWARE\GFI\LNSS9\Config\EventLog = 1(dword)
Note
To stop GFI LanGuard from generating ‘Application Log’ entries, remove the registry
value described above or change the registry value to 0.
Step 2: Configure GFI EventsManager to collect Application logs
GFI LanGuard outputs windows event logs to the ‘Application Log’ category. Ensure that the
collection of Application logs is enabled on the GFI LanGuard event source.
To enable processing of GFI LanGuard events:
1. Open GFI EventsManager Management Console.
2. Click Configuration tab > Event Sources.