Hi all
I 'm into implementing this one and found this article whiuc would perfectly suit my needs.
https://community.graylog.org/t/active-directory-auditing-nxlog-graylog-2-x/22888
just that i need a bit of help implementing it.
What are the steps please, and sorry for the n00b stuff here.
I don;t know how to manage the part with the json.
Also, my DCs are already with NXLOG installed and sending data successfully on a separate INPUT i created for this.
Thank you 