Elastic Endpoint Windows Event Log - Security Channel

mikemitchell · August 19, 2021, 4:06pm

Does the Elastic Security Windows Integration or the Endpoint Integration not have the ability to pull from the Security channel of Windows Event Logs?

I had to create a new Custom channel to pull in security events from my windows machines. This would be a nice option in the default Windows Integration to pull Security channel.

PublicName · August 19, 2021, 5:02pm

Add System integration it's oddly not Windows integration.

system · September 16, 2021, 5:02pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Elastic Endpoint Security Data Sources Elastic Security	1	270	February 18, 2022
Windows Elastic Agent System Integration not pulling Security or Application events Elastic Security elastic-stack-security , fleet , integrations	4	1024	March 23, 2022
How far back in time does the Elastic Endpoint Security platform grab logs? Endpoint Security	2	381	December 21, 2021
Endpoint Security Intergration vs. Windows and System Intergrations Endpoint Security	3	1089	March 9, 2022
Integration Differences - Fleet Policies Endpoint Security integrations	3	677	February 17, 2022

Elastic Endpoint Windows Event Log - Security Channel

Related Topics