How do I enable Get-WindowsUpdateLog PowerShell as...

daniel333 · ‎08-21-2018

All,

Any more guidance here? Is there an input I need to enable I am missing? As they expecting this as a scheduled task? How is there a TA? What interval? Not a windows guy here so I a little confused on the ask.

###### Windows Update Log ######
# Windows update logs for newer Windows OS like Windows 10 and Windows Server 2016 are generated using ETW (Event Tracing for Windows).
# Please run the Get-WindowsUpdateLog PowerShell command to convert ETW traces into a readable WindowsUpdate.log.
# Further to index data of the log file thus generated, you may also require to change the location mentioned
# in the below monitor stanza to provide the path where you have generated the file after conversion.

hettervik · ‎04-30-2020

Are these steps what you are looking for, or do you need more guidance?

https://docs.splunk.com/Documentation/WindowsAddOn/8.0.0/User/Upgrade#WindowsUpdate.log_changes_for_...

How do I enable Get-WindowsUpdateLog PowerShell as requested in the docs?

Operationalizing TDIR: Building a More Resilient, Scalable SOC

Almost Too Eventful Assurance: Part 1

Demo Day: Strengthen Your SOC with Splunk Enterprise Security 8.1

Are you a member of the Splunk Community?

How do I enable Get-WindowsUpdateLog PowerShell as requested in the docs?

Operationalizing TDIR: Building a More Resilient, Scalable SOC

Almost Too Eventful Assurance: Part 1

Demo Day: Strengthen Your SOC with Splunk Enterprise Security 8.1