I have a few windows and SLES servers. I only want to collect authentication logs. I can customize rsyslog in SLES but in windows, all logs are being captured, How can I configure Graylog 4 so that only authentication [ success/failure] logs are stored in disk and the rest all logs are discarded.

How can I configure Graylog 4 so that only authentication [ success/failure] logs are stored in disk

tmacgbay (Tmacgbay) January 25, 2021, 7:59pm 7

Created a new post with the relevant tables here.

1 Like

Topic		Replies	Views
Why Graylog does not collect some logs from Windows Servers? Graylog Central (peer support) windows , nxlog , gelf	1	112	July 16, 2025
Graylog log analizy Active directory Graylog Central (peer support)	2	981	August 9, 2022
Graylog Sidecar Winlogbeat Drop Event New to Graylog Community? READ-ME FIRST Guides sidecar , windows , winlogbeat	2	557	June 8, 2024
Winlogbeat to Graylog Graylog Central (peer support)	4	4288	January 3, 2024
Active Directory Audit logs for accounts, DNS Graylog Central (peer support)	13	2734	January 26, 2024