MS Windows Event Log Sources
Recently Added Guides
| Name | Date |
|---|---|
| MS Windows Event Logging XML - System | March 29, 2023 |
| MS Windows Event Logging - MSExchange Management | March 1, 2023 |
| MS Windows Event Logging XML - WMI | November 23, 2022 |
| MS Windows Event Logging XML - PowerShell | November 1, 2021 |
| MS Windows Event Logging - AppLockerApp | August 26, 2021 |
| MS Windows Event Logging XML - ADFS | August 26, 2021 |
| MS Windows Event Logging XML - Application | August 26, 2021 |
| V 2.0 : MS Windows Event Logging XML - Security (Configuration Guide) | March 22, 2021 |
| V 2.0 : MS Windows Event Logging XML - Sysmon (Configuration Guide) | March 22, 2021 |
Configure LogRhythm to Collect Logs
Only Global Admins or Restricted Admins with elevated View and Manage privileges can take this action.
These instructions assume you have already completed all procedures described in the specific device configuration guide for the logs you want to collect.
- In the Client Console on the main toolbar, click Deployment Manager.
- Click the System Monitors tab.
- Double-click the System Monitor Agent that collect the information.
The System Monitor Agent Properties dialog box appears. - Click the Agent Settings tab.
- Right-click anywhere in the Log Message Sources Collected by this Agent grid, and then click New.
- Click the Basic Configuration tab.
For Log Message Source Type, select the name of the log as provided in the specific device configuration guide, and then click OK.
Complete any additional steps described in the specific device configuration guide, if applicable.
To save the configuration, click OK, and then click OK again.