Hello,
I checked the policy on the active directory and it enables windows firewalls logs. I accessed the path to which the firewall logs are logged, and it was found succesfully with all logs.
But, those logs are not being shipped to LEM.
Please advise,
Hey,
Do you have the LEM agent installed on the node you wish to collect the firewall logs from?
Once the agent is installed, go to Manage - Nodes within LEM & then click on the node in question & go to connectors. You can then search for Windows Firewall & enable that connector. The connector is set to monitor C:\Windows\pfirewall.log by default - but this can be changed if you have set a custom location.
