Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue configuring Kansa to collect specified days of Security logs #199

Open
Mark-E-IT opened this issue Apr 8, 2020 · 1 comment
Open

Comments

@Mark-E-IT
Copy link

I'm not sure if this is an issue or intended behavior. When attempting to run the following command, I get an error that the "Parameter is incorrect"

.\kansa.ps1 -target $env:computername -ModulePath ".\Modules\Log\Get-LogWinEvent.ps1 Security 1"

Removeing the "1", will allow for the data to be collected. From the documentation, there are three paramaters for the script, Log name, number of Days, and EventIDs, to collect. I'm not sure if I am incorrectly assuming those same parameters should also apply to running the module manually? This would be ideal, as I would like to modify the modules.conf file with the same parameters, as allowing kansa to collect the entire security log takes an extraordinary amount of time.

@dmoore44
Copy link
Contributor

I messed that up - there's some parameter parsing issues that I need to work through. I'll see if I can get that fixed here in the next few days.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants