I'm trying to search a multiline event from a windows server. I need to find out which changes was made with a file. So I have to parse the Accesses. The field Accesses show me only the first entry but I need them all. Have you any idea how I can search the events and find out the differnet accesses of a file?
For example an excerpt of the event.
At the end of my search I will show a report where I can see which operation will be done with the files. It should shown as a table. But first I have to figure out how to get the values out of the multiline event.
Thanks for your help.