As a consequence of the deficiency in CD40 ligand, the T-lymphocytes in patients with X-linked Hyper IgM (XHIGM) are unable to instruct B-lymphocytes to switch their production of immunoglobulins from IgM to IgG, IgA and IgE.
Windows event logs are also files, but they are commonly locked by Windows (Event Log Service) and it is impossible to open these files on live system. But if the computer is started from another disk or the system drive from the analyzed machine is connected to another computer, you can read event logs as files. The default location of event logs on Vista/2008 and better is C:\Windows\System32\winevt\Logs\.
For more information about capturing data from network sources, see Get network events in the Getting Data In Manual. Windows sources. Splunk Enterprise includes a wide range of Windows-specific inputs. It also provides pages in Settings for defining the following Windows-specific input types: Windows event log, registry, perfmon, and WMI data