Enable printservice log events

Before you can use Sigma rules related to printservice log events, you will need to enable them.

Procedure

  1. Open the Windows Start menu and search for the Event Viewer application. Launch the application.


    The Event Viewer application opens.
  2. Select Windows > PrintService.


    The PrintService page opens.
  3. Right-click on Operational and select Enable Log.


Results

Printservice log events are now enabled in Windows.