Alors en fait oui il y a bien une balise racine car je n'ai pas mis toute la ligne d'un enregistrement.
Voici la ligne complète :
<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-PrintService' Guid='{747EF6FD-E535-4D16-B510-42C90F6873A1}'/><EventID>307</EventID><Version>0</Version><Level>4</Level><Task>26</Task><Opcode>11</Opcode><Keywords>0x4000000000000840</Keywords><TimeCreated SystemTime='2018-02-19T13:17:38.181678500Z'/><EventRecordID>1210</EventRecordID><Correlation/><Execution ProcessID='1096' ThreadID='6012'/><Channel>Microsoft-Windows-PrintService/Operational</Channel><Computer>A25SVPS.za.if.atcsg.net</Computer><Security UserID='S-1-5-21-3095416536-3097367016-2845470932-29946'/></System><UserData><DocumentPrinted xmlns='http://manifests.microsoft.com/win/2005/08/windows/printing/spooler/core/events'><Param1>213</Param1><Param2>Print Document</Param2><Param3>N3196715</Param3><Param4>A25LT50546</Param4><Param5>A25PRT05P0A</Param5><Param6>10.128.45.159</Param6><Param7>133897</Param7><Param8>1</Param8></DocumentPrinted></UserData></Event>
Partager