Skip to main content

Status Page Contact Us

AARNet Home

Status Page
Contact Us
AARNet Home

AARNet Knowledge Base
SOC Services
FAQs

Articles in this section

Can AARNet provide guidance on the sizing of the WEC server?
Do we need to build multiple WEC servers for redundancy purposes?
Can I set up load balancing between multiple WEC servers?
How are logs/events collected at the WEC server exported to the AARNet SIEM?
Which events should we log?
What happens if the WEC server is not able to communicate with the AARNet SIEM?
Is there a way to determine the size of the disk based on the number of events seen in our environment?
What happens to the events collected in the WEC server once they have been exported to the AARNet SIEM?
What firewall settings are needed for the WEC server and event sources?

Which events should we log?

June 20, 2023 05:01
Updated

See Configure Windows Event Logging for a list of event types to capture and forward to your WEC server.

Was this article helpful?

0 out of 0 found this helpful

Related articles

Collection
Introduction
Create a consumer group in the new event hub
How are logs/events collected at the WEC server exported to the AARNet SIEM?
About Winlogbeat

AARNet acknowledges the Traditional Custodians of country throughout Australia and we pay our respects to Elders past and present.

© AARNET Privacy Legals Admin Login