Update splunk/wevutil.md

2025-01-11 23:13:32 -05:00
parent 2fc664eb84
commit 81863a4b78
1 changed files with 5 additions and 1 deletions
--- a/splunk/wevutil.md
+++ b/splunk/wevutil.md
@ -1 +1,5 @@
+```
 wevutil cl Application
+wevtutil qe Security /f:xml > *.xml
+"wevtutil epl" AND  ("Security *.evt*" OR "Application *.evt*")
+```