Hello. Log collection and analysis from Active Directory. Collecting logs with winlogbeat ,nxlog,filebeat I see the logs, but I don’t see account lockouts, for example. My configuration in NXlog/ define ROOT C:\Program Files (x86)\nxlog Moduledir %ROOT%\modules CacheDir %ROOT%\data Pidfile %…

Graylog Active Directory

gsmith (GSmith) July 15, 2022, 9:59pm 2

Hello & Welcome @barfly

I’m not sure what’s going on in this post.

Perhaps take a look here

Topic		Replies	Views
Active directory Logs Graylog Central (peer support)	2	495	November 14, 2023
Graylog Beginner - Wondering if I have the right tool for the job? Graylog Central (peer support)	3	276	January 25, 2024
Windows Event Log - Security Graylog Central (peer support)	3	2140	July 1, 2019
Question on greylog and events from Windows AD controller Graylog Central (peer support)	3	370	February 15, 2024
Nxlog for graylog Graylog Central (peer support) sidecar , nxlog , nodatanx	20	4904	May 7, 2019