This is the log when the application with a window is terminated in the client (CT). When terminating the application without a window, an application termination log cannot be collected.
How to apply
When collecting an application termination log, the user who terminates the application and the application that is terminated can be known.
Set policy for collection
Set policy in the Terminal Initial Settings window, the User Policy Settings window or the window after Management Console is started (CT policy settings window).
In Windows > Log collection operation, set Application Termination Log to Yes.
Displayed content
The following log content can be viewed:
Name: name of the client (CT)
Occurrence Date and Time: time for collecting logs at client (CT)
User ID: logon user name of the client (CT)
Domain Name: it is the domain name of the client (CT) when logging on to domain while it is the computer name of the client (CT) when logging on to local computer
Type: Application Termination (fixed value)
Classification: normal
Attachment: (not displayed)
Content: the following content is displayed.
Name of the terminated application (*1)
Example of Content:
Ended [iexplore].
*1: When performing keyword search in Log Viewer, it can be specified as keyword.
Note: The content below is displayed.
Process ID (*1)
Parent process ID (*1)
Argument (*1)
Example of Note:
Process ID:[3182],Parent Process ID[5032],Parameter:[C:\Windows\notepad.exe D:\Individual information.txt]
*1: Can be specified as a keyword when performing a keyword search in the Log Viewer.
