Hello. Log collection and analysis from Active Directory. Collecting logs with winlogbeat ,nxlog,filebeat I see the logs, but I don’t see account lockouts, for example. My configuration in NXlog/ define ROOT C:\Program Files (x86)\nxlog Moduledir %ROOT%\modules CacheDir %ROOT%\data Pidfile %…

Graylog Active Directory

gsmith (GSmith) July 15, 2022, 9:59pm 2

Hello & Welcome @barfly

I’m not sure what’s going on in this post.

Perhaps take a look here

Topic		Replies	Views
Active Directory Audit - Not Collecting Data Graylog Add-ons sidecar , nxlog , nodatanx	6	4023	October 18, 2018
Windows Event Log - Security Graylog Central (peer support)	3	2177	July 1, 2019
Active directory Logs Graylog Central (peer support)	2	588	November 14, 2023
Graylog log analizy Active directory Graylog Central (peer support)	2	978	August 9, 2022
Windows logs from Server 2003 Graylog Central (peer support) sidecar , nxlog , nodatanx	7	3940	June 8, 2017