Not sure if this is possible, I thought Log Insight is only useful if we are using modernize operating systems / applications. My environment still have some old legacy operating systems yet to be migrate (predominantly still on W2K and W2K3 especially the AD), if so how can I use forward event logs / system logs to Log Insight dashboard for monitoring purpose....
Logon/Logoff/Account Lockout/Security State Change etc...
Otherwise the tool is quite useless compared to Splunk.