Does anyone know why and how to get Windows Active Directory events from the Event Log Forwarder to show up in the SEM Console under All Events or anywhere there? The Active Directory events do get forwarded to a the SEM database but they do not show up in the SEM Console under Filters. We created a filter to monitor AD Events such as 4625 or 4740 and don't see it anywhere on the SEM Console.
In the SEM Filters, you can see only the normalised events. The forwarded logs are the raw logs which are not displayed. You can find more here https://documentation.solarwinds.com/en/success_center/SEM/content/Admin_Guide/New_In_6_5/SEM-Log-Fo...
I hope this helps.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process. Learn more today by joining now.