Description: This quick little query will ensure that the Windows Event log is up and running as it should be.
SQL:
SELECT *,
CASE
WHEN status = 'RUNNING' AND start_type = 'AUTO_START' THEN 'TRUE'
ELSE 'FALSE'
END compliant
FROM services WHERE name = 'EventLog';
Operating Systems: Windows Only
References:
#event_log