i have installed a content pack to analyze active directory changes. The data is transmitted via Sidecar (winlogbeat). Since we have multiple domain controllers now my question would be:
Is it enough to install Sidecar on one domain controller or do I need to install it on each one? I have the “fear” that the data may then be duplicated?