Hello. Log collection and analysis from Active Directory. Collecting logs with winlogbeat ,nxlog,filebeat I see the logs, but I don’t see account lockouts, for example. My configuration in NXlog/ define ROOT C:\Program Files (x86)\nxlog Moduledir %ROOT%\modules CacheDir %ROOT%\data Pidfile %…

Graylog Active Directory

gsmith (GSmith) July 15, 2022, 9:59pm 2

Hello & Welcome @barfly

I’m not sure what’s going on in this post.

Perhaps take a look here