As a consequence of the deficiency in CD40 ligand, the T-lymphocytes in patients with X-linked Hyper IgM (XHIGM) are unable to instruct B-lymphocytes to switch their production of immunoglobulins from IgM to IgG, IgA and IgE.
Windows event logs are also files, but they are commonly locked by Windows (Event Log Service) and it is impossible to open these files on live system. But if the computer is started from another disk or the system drive from the analyzed machine is connected to another computer, you can read event logs as files. The default location of event logs on Vista/2008 and better is C:\Windows\System32\winevt\Logs\.
Before you configure the Monitor Event Log activity, you need to determine the following: Name of the event log you are monitoring. Details about the events that will invoke the runbook. Use the following steps to configure the Monitor Event Log activity. To configure the Monitor Event Log activity From the Activity pane, drag a Monitor Event Log activity to the runbook. Double-click the Monitor Event Log activity icon to open the Properties dialog box. Configure the settings on the Details tab and on the Advanced tab. Configuration instructions are listed in the following tables.