Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Receive only Windows security log by default?

$
0
0

This looks promising, however for now at least I reverted to switching off the application and system logs per node.  I created a profile and stopped these connectors but the next node I added to the profile continued to pull them in.

 

Does it perhaps take a couple of minutes for a profile to apply?  I must say I reverted using the profile after about 30 seconds I saw the second node still showing these logs as active.  I will however try again using two nodes that I know to be "less chatty".  I do wonder if the profile settings on apply to the options within each connector e.g. Alias, Output, nDepth Port etc.

 

Lastly and this is probably my lack of understanding, I found that when editing a node from the Cog > Connectors option to stop these logs they were again active after a node reboot.  This time I've switched them off by double-clicking the node and used the On/Off switches under "Node: Connectors Applied" hopefully these will stick.

 

Reminder we're on v6.1.0.


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>