2013-10-08 01:28 PM
What metadata field will show windows security event ID numbers?
2013-10-09 11:19 AM
Found out it is listed under "msg.id" as, for example, "Security_4625_Microsoft-Windows-Security-Auditing" or "Security_680_Security:03"
2013-10-09 11:19 AM
Found out it is listed under "msg.id" as, for example, "Security_4625_Microsoft-Windows-Security-Auditing" or "Security_680_Security:03"