I am hoping that someone has had some degree of success with logging Microsoft Exchange 2016.
Our messaging team is upgrading to 2016 and I need to ensure the system logs to the SIEM. I have not seen any (good) or read anything that highlights exactly how to log Exchange to SA/NW.
I have seen that this is file based, but is that the only way and how do we configure that on both the Exchange servers and in NW?
Thanks for the help.
Maybe you could check WEC and LOGbinder ?