Windows Event Forwarding - Pruning/Grooming WEC Server Registry

C

clhal1234

Hi,

We have been using WEF successfully for a couple years now at our organization, but we have a growing registry problem..


It's mentioned in several Microsoft articles that the WEC server maintains a registry key for every unique device that over time connects to a defined WEF subscription. This is how WEC tracks last heartbeat and bookmark information for each device.


The problem is the registry will simply keep growing indefinitely until either the registry becomes unusable or you do some pruning/grooming of "stale device" registry keys. The question -- how do we avoid the former and instead perform the latter.


Does anyone have a tool, script, or other automated method for performing this cleanup?

Continue reading...
 
Back
Top Bottom