4771 multiple logs for one event Expand / Collapse
Author
Message
Posted 1/7/2014 10:41:23 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 1/7/2014 10:32:13 AM
Posts: 1, Visits: 0
I am trying to dedup failed logins on my SIEM and I am seeing some weird logs. For some failed logins the DCs will send out multiple logs during one event but only the rn=* and client port changes. Does anyone have any ideas why this is happening?
Post #1303
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 9:07pm