Send Username of windows event | Log collection solutions

#1 IB_956097 4 years ago

Hi,

i'm forwarding windows event to SIEM with nxlog i'm trying to send to SIEM the username of logged user (the user of event), without success it's possible to send username ?

thanks you

Permalink

#2 rafDeactivated Nxlog ✓ 4 years ago

#1 IB_956097

Hi, i'm forwarding windows event to SIEM with nxlog i'm trying to send to SIEM the username of logged user (the user of event), without success it's possible to send username ? thanks you

Hey,

I think you might want to explore a bit about im_msvistalog. You can find there what kind of fields are available and how to use/call certain fields.

In case you have issues with exploring the possibilities - please, let us know and share the config file which you stuck with.

Good luck,
Rafal