LogAnalyzer LA missing Event with ID 2889

sumis-it

Hi there I am looking for a solution to monitor the LDAP requests to the domain controller. According to Microsoft, this occasionally has to be switched to LDAPS. Can someone help me how I can see the events with the ID 2889 in the LogAnalyzer? I can see them in the Windows Event Viewer. Thank you very much https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/ldap-channel-binding-and-ldap-signing-requirements-march-2020/ba-p/921536#

tony.johnson

Hello,

This article describes the steps to collect windows event logs in Log Analyzer

https://documentation.solarwinds.com/en/Success_Center/LA/Content/LM/LM-Set-up-Windows-Event-Collection.htm

This may also be of interest

https://thwack.solarwinds.com/t5/LA-Documents/How-to-Filter-Windows-Events-using-the-Log-Analyzer-Agent/ta-p/518522