What is the best way to get AD authentication logs in ELK

What is the best way to ingest AD authentication logs in ELK, through elastic agent or through audit beats .. we don’t want to impact AD server performance

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.