Show Windows Security Event ID number

[Anonymous]

What metadata field will show windows security event ID numbers?

[Anonymous · Accepted solution]

Found out it is listed under "msg.id" as, for example, "Security_4625_Microsoft-Windows-Security-Auditing" or "Security_680_Security:03"