|
|
|
Forum Newbie
Group: Forum Members
Last Login: 2/2/2016 6:31:53 AM
Posts: 1,
Visits: 2
|
|
Hi All,
Im trying to poll Microsoft Direct Access audit logs from Event Viewer using IBM QRadar Wincollect agent. I follow the below article to collect the events.
blogs.technet.com/b/martin_j_solis/archive/2015/03/20/additional-way-to-monitor-directaccess-machine-user-activity-on-windows-2012-and-2012r2-directaccess-with-component-even-logging.aspx
The details tab in event viewer provide more information about the user and IP details. Now the main objective is to poll the XML data from details tab. Please guide me if there is any possibility to poll those data.
|
|
|
|