![How to audit the windows Event Log for deleted files using event filter in xPath form - Pat Handy Dot COM How to audit the windows Event Log for deleted files using event filter in xPath form - Pat Handy Dot COM](https://pathandy.com/wp-content/uploads/Fileaudit000013.png)
How to audit the windows Event Log for deleted files using event filter in xPath form - Pat Handy Dot COM
![How to audit the windows Event Log for deleted files using event filter in xPath form - Pat Handy Dot COM How to audit the windows Event Log for deleted files using event filter in xPath form - Pat Handy Dot COM](https://pathandy.com/wp-content/uploads/Fileaudit000019-2.png)
How to audit the windows Event Log for deleted files using event filter in xPath form - Pat Handy Dot COM
![grok Pattern for Event ID 4663 not working extractor - Graylog Central (peer support) - Graylog Community grok Pattern for Event ID 4663 not working extractor - Graylog Central (peer support) - Graylog Community](https://global.discourse-cdn.com/business6/uploads/graylog/original/2X/b/bdb1f867856561ce797e5b53d6181032e425d882.png)
grok Pattern for Event ID 4663 not working extractor - Graylog Central (peer support) - Graylog Community
![Solved: Too much event id 4663 generated for file access audit on a Windows file server. | Experts Exchange Solved: Too much event id 4663 generated for file access audit on a Windows file server. | Experts Exchange](https://filedb.experts-exchange.com/incoming/2019/12_w49/1438086/2019-12-03Event4663.jpg)
Solved: Too much event id 4663 generated for file access audit on a Windows file server. | Experts Exchange
![Solved: Too much event id 4663 generated for file access audit on a Windows file server. | Experts Exchange Solved: Too much event id 4663 generated for file access audit on a Windows file server. | Experts Exchange](https://filedb.experts-exchange.com/incoming/2019/12_w49/1438172/2019-12-04-08_36_23-SRVGPSAudit.png)