Hello everyone,
I am a very new user to graylog and I am struggling with understanding how to use the content:
I have winlogbeat installed and pointing at the graylog host and the pre-requirements for auditing enabled on theWindows DC. I have the standard winlogbeat template I am using for logging but its very lengthy and are no dashboards.
My question is what do I do with the content in the active directory auditing to show those logs and the dashboard? I have looked but did not see much content on how to apply the content pack.
Any help much appreciated.