How do you use Windows logs usually?

[AntoineDRN]

Hi everyone !

As an intern for an engineer degree, I have to make a stat of the art around Windows logs and how it is used with Splunk among others. 

So here is my question, what are you doing usually with Windows logs, which piece of information do you get back and what is the purpose? 

Thank you in advance for your answers!

Regards,

Antoine

[gcusello]

Hi @AntoineDRN,

to make some stat about use of Windows logs, I think that you could start taking the number of downloads of the Windows TA and of Windows Infrastructure app, eventually matching these data with other similar (e.g. TA_Linux and Linux_App).

In this way you could have an idea of the percentage of use of them.

About the kind of uses, you could see the features of the Splunk App for Windows infrastructures.

Ciao.

Giuseppe