OS: Windows Server 2012 R2
Collector Sidecar version: 0.1.7
Graylog 2.5.1+34194da (Oracle Corporation 1.8.0_191 on Linux 4.15.0-45-generic)
Problem: When rebooting the system, there is no log à la
The process <process> has initiated the restart of <computer name> for the following reason: No title for this reason could be found. Minor Reason: <reason> Shutdown Type: <type> logged to my Graylog instance.
I can find it in the local Event Log, though.
I can replicate this on multiple Graylog instances and multiple servers.
What is weird is that it logs everything else, just not this one log entry. Also weird: Sometimes it is being logged on some systems.
Thanks in advance!