If logging to a security log fails for any reason, can LEM produce an onscreen alert of such failure? I am not referring to the failure of some account failing to logon properly, but I am referring to the actual failure of logging mechanism itself?
There are template rules for Windows logs being cleared or full, and so logging has been compromised or stops. If an event is generated, we can probably alert off it.
