Imports events from an EVT file into the ELM Server database. The ELM Server must have the following for the computer providing the EVT file:
•ELM Agent(s) for the computername(s) in the EVT file •RPC Connectivity to the computer •Read permissions to the registry on the computer •Read permissions to the file system on the computer •Remote Registry Service running on the computer Either file or logname must match the event log name as displayed in Windows Event Viewer. If file or logname is not specified correctly, then some of the events messages may be incomplete.
At least 1 Event View must have a Date Range that encompasses all the desired historical events. Date Range is in the properties of an Event View.
Recent events can trigger Notification Methods. See Disable...for Cached (old) data and CacheDataTrigger for more details.
Also note the default database pruning will delete older events.
|