# Unable to see any login or failure event from windows hosts

**URL:** <https://discuss.elastic.co/t/unable-to-see-any-login-or-failure-event-from-windows-hosts/285725>\
**Category:** Elastic Security\
**Created:** [October 2, 2021, 4:16am UTC](https://discuss.elastic.co/t/unable-to-see-any-login-or-failure-event-from-windows-hosts/285725 "2021-10-02T04:16:43Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Blason](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/blason/32/42284_2.png) [@Blason](https://discuss.elastic.co/u/Blason)\
**Post date:** [October 2, 2021, 4:16am UTC](https://discuss.elastic.co/t/unable-to-see-any-login-or-failure-event-from-windows-hosts/285725/1 "2021-10-02T04:16:44Z")

</div>

Hi Folks,

I have setup elastic SIEM 7.15 with fleet and integrations with elastic-agent and windows.  
I enrolled windows server in fleet and then I generated few failure events. However those are not being reflected on SIEM App.

Is anything else that I need to do in elastic agent configuration or windows configuration?

---

<div class="post-metadata">

**Author:** ![sholzhauer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sholzhauer/32/110282_2.png) [@sholzhauer](https://discuss.elastic.co/u/sholzhauer)\
**Post date:** [October 4, 2021, 7:18am UTC](https://discuss.elastic.co/t/unable-to-see-any-login-or-failure-event-from-windows-hosts/285725/2 "2021-10-04T07:18:35Z")

</div>

Hi Blason,

Couple of questions:

1. Does you agent show up in the fleet overview?
2. Do you see any events comin in at all from the host?
3. What do you mean by "No events reflected in SIEM app"? As in where do you expect them to show?

Regards  
Stijn

---

<div class="post-metadata">

**Author:** ![Blason](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/blason/32/42284_2.png) [@Blason](https://discuss.elastic.co/u/Blason)\
**Post date:** [October 5, 2021, 5:33pm UTC](https://discuss.elastic.co/t/unable-to-see-any-login-or-failure-event-from-windows-hosts/285725/3 "2021-10-05T17:33:16Z")

</div>

Hey,

Thanks for the reply- it automatically started appearing the events after sometime.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 2, 2021, 5:33pm UTC](https://discuss.elastic.co/t/unable-to-see-any-login-or-failure-event-from-windows-hosts/285725/4 "2021-11-02T17:33:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.