has anyone gotten MS Exchange CAS logs into Netwitness?

[EricSchwartz1]

I am trying to see if it is feasible to parse MS Exchange CAS logs into NetWitness. I am running 11.3.1 and run Exchange 2016. If anyone can steer me in the right direction, I would appreciate it.

Thanks  

Eric S

[sravan.koneti]

Hi Eric Schwartz‌,

Does CAS logs written to Windows Event Viewer?

if yes, you can try https://community.rsa.com/docs/DOC-40234  for windows event collection.