Remote Event Viewer

Use Recast's Remote Event Viewer to browse, search, and analyze Windows event logs on managed devices. When used with the Recast Agent, Remote Event Viewer provides secure access to event data without the need for direct connectivity. Remote Event Viewer supports browsing both Windows Logs and Application and Services Logs.

Prerequisites

• Licensing: Available with Right Click Tools Enterprise licenses (except Legacy subscriptions). Right Click Tools Community users will see the feature in Right Click Tools but, without Recast Agent, it will have the same direct network connectivity requirement as Windows Event Viewer. 
• Right Click Tools Enterprise deployed via Recast Management Server or Recast Cloud
• Recast Agents deployed to devices (strongly recommended)
  NOTE: If not using Recast Agent, RCT Remote Event Viewer requires network connectivity and administrator permissions on the target device. You'll also need to enable the Windows Remote Event Viewer service and have it running on the target device.
• Minimum Recast Software version: 5.13.2610
• Minimum Right Click Tools browser extension version: 3.5.0.0

Run the Remote Event Viewer Tool

To open Remote Event Viewer:

1. Right-click on a device.

2. Select Right Click Tools > Remote Tools > Remote Event Viewer.

3. In the navigation pane, browse available event logs.

4. Select or search to locate events.

TIP: You can also filter by Event ID, Level, Source, User Name (when available) or Date Range.

5. Select an event to view details, including the Severity Level, Event Source, and Event ID.

TIP: Open the More Options menu (...) to select the following actions:

• Reset Filters
• Refresh Logs
• Clear Displayed Results
• Export to CSV

Recast Permissions