May I know how to find out or retrieve the raw event log after enable the option EnableRawEventLogging in collector??
Configuring collector raw event logging
One of your thread
Thanks In Advance
SEPM Knowledgebase Documents
It would be nice if SSIM had an easy (GUI!) option to view the raw log. Although maybe then we'd be asking questions like "why is this field logged to this? that's not right..."
Whenever you have Raw Event Logging enabled, you can double click on any event & locate the Raw Event field.
Please check the attachment.