NXLog Legacy Documentation

WMI (Windows Management Instrumentation)

What is Windows Management Instrumentation?

Description: The Windows Management Instrumentation (WMI) system is an implementation of the Web-Based Enterprise Management (WBEM) and Common Information Model (CIM) standards. It provides an infrastructure for overseeing remote systems and delivering management data.
In the world of NXLog: WMI event logging uses Event Tracing for Windows (ETW). You can collect WMI logs via Windows Event Log or ETW. For Windows versions before Windows Vista and Windows Server 2008, it is also possible to read from WMI log files. NXLog can collect WMI events with the Event Tracing for Windows (im_etw) module.
Known as: WMI, Windows Management Instrumentation, windows wmi, microsoft wmi, wmi server
Related: Windows Management Instrumentation (WMI)
Understanding and auditing WMI
Event Tracing for Windows (im_etw)

A B C D E F G H I J K L M N O P R S T U V W X Z

A

agent-based log collection

agentless log collection

B

C

CEF (Common Event Format)

CSV (Comma-separated Values)

D

E

endpoint security

EPS (Events Per Second)

ETW (Event Tracing for Windows)

event correlation

F

G

GELF (Graylog Extended Log Format)

H

High Availability (HA)

I

ICMP (Internet Control Message Protocol)

IDS (Intrusion Detection System)

J

JSON (JavaScript Object Notation)

K

KVP (Key-Value Pair)

L

LEEF (Log Event Extended Format)

log centralization

log normalization

M

MSSP (Managed Security Service Provider)

multi-line logs

N

O

P

PCI-DSS (Payment Card Industry Data Security Standard)

R

Raijin database

Remote Access Server Role

S

SCCM (System Center Configuration Manager)

SEM (Security Event Management)

SIM (Security Information Management)

SIEM (Security Information and Event Management)

SNMP (Simple Network Management Protocol)

SOC (Security Operations Center)

structured logging

T

TCP (Transmission Control Protocol)

TLS (Transport Layer Security)/SSL (Secure Sockets Layer)

U

UEBA (User and Entity Behavior Analytics)

UDP (User Datagram Protocol)

V

vendor-agnostic

W

W3C Extended Log File Format

WEC (Windows Event Collector)

WEF (Windows Event Forwarding)

Windows Event ID

WMI (Windows Management Instrumentation)

X

Z