Skip to content

Improve uptime time for computer-metrics #1656

@YamatoSecurity

Description

@YamatoSecurity

Right now in the computer-metrics command we are using the System 6013 log to determine uptime that only gets updated every 24 hours or so and might be unreliable so this probably not the best way to determine uptime.
We should look for the following events to determine the last startup time:

System 6005 (Event Log service started)
System 6009 (Computer startup)
System 12 (Computer startup)

We should choose the latest timestamp of any 3 of these events.

Then we should check the timestamp of the event with the latest timestamp and calculate the difference to determine the uptime by that.

@fukusuket Could I ask you to do this one?

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions