We are trying to track Application and Device control by looking at the log files. Right now it is setup to send an email. These emails are generated and each one needs to be opened and then open the .mht file.
We are trying to figure out a way to have the report generate a csv file and put it in a central location by date. That way we can just view the logs for that particular day. We need to keep track of this and dont want the files overwritten.
I can go to monitors\logs and create a report and view it that way but we are looking for a way to streamline this.
Maybe have the report send one email daily stating there were security alerts generated. Then a report in CSV format is generated daily and exported with date in file name . Then someone can go to the particular folder where it is saved and look at one file. It is time consuming to have to open each email or have someone run a report daily and then look at everything.
Also does anyone know how long the history is for the application and device control logs or where the log is stored for this report?
Any help would be greatly appreciated.