i have installed a content pack to analyze active directory changes. The data is transmitted via Sidecar (winlogbeat). Since we have multiple domain controllers now my question would be:
Is it enough to install Sidecar on one domain controller or do I need to install it on each one? I have the “fear” that the data may then be duplicated?
If you have multiple DC in the network you need to install a sidecar in each server is the best to get more information.
any way the Host filed for each DC is different, right?
By default no they are not replicated windows - Domain Controller Replication, do logs replicate? - Server Fault
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
