How to Log Using Active Directory Auditing (WinLogBeat)

Hello everyone,

I am a very new user to graylog and I am struggling with understanding how to use the content:

I have winlogbeat installed and pointing at the graylog host and the pre-requirements for auditing enabled on theWindows DC. I have the standard winlogbeat template I am using for logging but its very lengthy and are no dashboards.

My question is what do I do with the content in the active directory auditing to show those logs and the dashboard? I have looked but did not see much content on how to apply the content pack.

Any help much appreciated.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.