Hello @Russ Rimmerman thanks for this! Quick question, is it possible to
sort the data by the days left till expiration? So that the ones closer
to expiration appear first.
@Ciyaresh Thanks for responding. Did you create a data collection rule
through Windows Forwarded Events connector? >>> Yes, I selected security
events in the DCR and filtered with some custom event IDs. However, I've
tried selecting All events too but the WindowsEvents table shows empty.
Did you ver...
@nikeshd18 Did you create a data collection rule through Windows
Forwarded Events connector? Did you verify that your WEF setup works?
Checking the event viewer on the VM that is suppose to receive forwarded
eventsIf not, need to give more information about your setup
Latest Comments