Elastic Endpoint Windows Event Log - Security Channel

Elastic Security Endpoint Security
1

Does the Elastic Security Windows Integration or the Endpoint Integration not have the ability to pull from the Security channel of Windows Event Logs?

I had to create a new Custom channel to pull in security events from my windows machines. This would be a nice option in the default Windows Integration to pull Security channel.

2

Add System integration it's oddly not Windows integration.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.