NXLog Docs

WMI (Windows Management Instrumentation)

What is Windows Management Instrumentation?


The Windows Management Instrumentation (WMI) system is an implementation of the Web-Based Enterprise Management (WBEM) and Common Information Model (CIM) standards. It provides an infrastructure for overseeing remote systems and delivering management data.

In the world of NXLog

WMI event logging uses Event Tracing for Windows (ETW). You can collect WMI logs via Windows Event Log or ETW. For Windows versions before Windows Vista and Windows Server 2008, it is also possible to read from WMI log files. NXLog can collect WMI events with the Event Tracing for Windows (im_etw) module.

Known as

WMI, Windows Management Instrumentation, windows wmi, microsoft wmi, wmi server


Windows Management Instrumentation (WMI)
Understanding and auditing WMI
Event Tracing for Windows (im_etw)

A   B   C   D   E   F   G   H   I   J   K   L   M   N   O   P   R   S   T   U   V   W   X   Z