You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to ossec-list
It appears OSSEC is not logging warnings in windows logs. Is there some place this gets turned on?
ossec.conf is set to ingest windows app, system and security logs in the ossec.conf file present on the end points.
Yana Zaeva
unread,
Dec 9, 2021, 12:15:16 PM12/9/21
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to ossec-list
Hi,
You can do that using Eventchannel. Eventchannel is maintained since Windows vista and can monitor the Application and Services logs along with the basic Windows logs. You can check the following link for further information.
Hope it was helpful. Let me know if you need anything else.