This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Event Log Forwarder - Where is the Audit Failure Type?

Hi There,

I'm trialing Kiwi Syslog and I'm having trouble with the Log Forwarder and Security Event Log.  When I click on the Security Log I don't see Audit Success or Audit Failure as an event type.  It just has Error, Warning and Information.  If I manually edit the CFG file and add <int>16</int> it works, but then it gets overwritten if I make a change.  Am I doing something wrong?  How can I see Audit Failure as an Event Type?

Thanks,

Parents
  • As a temporary workaround, please manually edit the CFG file (LogForwarderSettings.cfg) and change

    <keywords>

    <string>Audit Success</string>

    <string>Audit Failure</string>

    </keywords>

    To

    <keywords>

    <string>0x20000000000000</string>

    <string>0x10000000000000</string>

    </keywords>

Reply
  • As a temporary workaround, please manually edit the CFG file (LogForwarderSettings.cfg) and change

    <keywords>

    <string>Audit Success</string>

    <string>Audit Failure</string>

    </keywords>

    To

    <keywords>

    <string>0x20000000000000</string>

    <string>0x10000000000000</string>

    </keywords>

Children