Enable printservice log events

Before you can use Sigma rules related to printservice log events, you will need to enable them.

  1. Open the Windows Start menu and search for the Event Viewer application. Launch the application.


    The Event Viewer application opens.
  2. Select Windows > PrintService.


    The PrintService page opens.
  3. Right-click on Operational and select Enable Log.


Printservice log events are now enabled in Windows.