Hi,
I am fairly new to Operations for logs. I have created following in Agent Config Edit section
[winlog|Application]
channel=Application
[winlog|Security]
channel=Security
[winlog|System]
channel=System
[winlog|WindowsFirewall]
channel=Microsoft-Windows-Windows Firewall With Advanced Security/Firewall
[winlog|UAC]
channel=Microsoft-Windows-UAC/Operational
[winlog|AD_DirectoryService]
channel=Directory Service
[winlog|AD_DNS_Server]
channel=DNS Server
[winlog|AD_DFS_Replication]
channel=DFS Replication
[winlog|Veeam]
channel=Veeam Backup
[winlog|ActiveDirectoryWebService]
channel=Active Directory Web Services
[winlog|PowerShell]
channel=Windows PowerShell
[winlog|DHCPClientsAdmin]
channel=Microsoft-Windows-DHCP Client Events/Admin
[winlog|DHCPClientsEventsOperational]
channel=Microsoft-Windows-DHCP Client Events/Operational
[winlog|DHCPServerEventsAdmin]
channel=Microsoft-Windows-DHCP Server Events/Admin
[winlog|DHCPServerEventsFilterNotifications]
channel=Microsoft-Windows-DHCP Server Events/FilterNotifications
[winlog|DHCPServerEventsOperational]
channel=Microsoft-Windows-DHCP Server Events/Operational
However i think i am unable to get the info from DHCP, Windows Firewall etc which are under Microsoft folder in events. Kindly help how can i fix it ? A guide / help shall be highly appreciated.
Regards
