![]() ![]() The account must be configured such that it has permissions to read the event log from each of the specified remote systems.Īn account has permissions to read events remotely if it is either a local Administrator or a member of the Event Log Readers local group on the target system. The credentials are stored in Sumo's database encrypted and in the Collector's memory. When configuring the Source, you will enter a domain name, user name, and password. This user account will be used by the Collector to perform the remote collection of event log records. The firewall on the remote machine must be configured to allow inbound connections for reading the event log.The user account specified in the source must have permissions to read the event log remotely.There are two primary configuration requirements to enable remote event log collection: Windows events can only be collected, locally or remotely, from systems running Windows Server 2012 or later.
0 Comments
Leave a Reply. |