Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

WEF question #37

Closed
ghost opened this issue Dec 21, 2017 · 1 comment
Closed

WEF question #37

ghost opened this issue Dec 21, 2017 · 1 comment

Comments

@ghost
Copy link

ghost commented Dec 21, 2017

Hey Chris, I honestly gave up on the Vagrant setup and pulled out the WEF/DC specific scripts and am starting to implement them in our environment. I have the WEF server up along with the GPOs deployed and assigned to a test OU.

I was waiting for the events to show up in the default forwarded events section of the event viewer but they were not showing up then I found them in Applications and services logs under different WEC folders. Again I don't know WEF well so is there a reason for them being in these folders vs the default forwarded events one? Also what is the reasoning behind the number and how things are broken out?
@ghost
Copy link
Author

ghost commented Dec 21, 2017

Sorry found the answer to my own question as I kept working with this.

https://github.com/palantir/windows-event-forwarding/tree/master/windows-event-channels

@ghost ghost closed this as completed Dec 21, 2017
This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
0 participants