hello,
How can I add or set that wazuh will see these two events id:
5143 and 5140 ??
I see thes logs in Security logs in Windows Server Event Viewer, but it looks that Wazuh doesn't report it in wazuh console, I mean. in Server_name -> Securicty Events-> Events I see all Security logs besides these two (5143 and 5140)
Something is missing ?
Thanks