Forum

Ultimate Windows Security Forum » Windows Security Settings » Direct Access Audit Logs

Direct Access Audit Logs Expand / Collapse
Rate Topic
Display Mode
Topic Options
Author
Message
rpremk24
Posted 2/1/2016 10:24:58 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 2/2/2016 6:31:53 AM
Posts: 1, Visits: 2
Hi All,

Im trying to poll Microsoft Direct Access audit logs from Event Viewer using IBM QRadar Wincollect agent. I follow the below article to collect the events.

blogs.technet.com/b/martin_j_solis/archive/2015/03/20/additional-way-to-monitor-directaccess-machine-user-activity-on-windows-2012-and-2012r2-directaccess-with-component-even-logging.aspx

The details tab in event viewer provide more information about the user and IP details. Now the main objective is to poll the XML data from details tab. Please guide me if there is any possibility to poll those data.
Post #5160
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 10:47pm