Are the Security Event Viewer logs replicated to the other DCs? Or are they all unique among DCs?

I am writing a policy because we have to audit or domain controller secuirty logs.  My question is we have 3 domain controllers.  Do I have to audit the security logs on each one or are the logs all replicatited with the same events?
Who is Participating?
JaredJ1Connect With a Mentor Commented:
You need to audit on each. They are not replicated.
You can use the EventCombMT tool from Microsoft to search for specific events across multiple servers/Domain Controllers.

The tool is free for download from the MS site.
MNBTechAuthor Commented:
Wow this tool is great.  Thank you so much!
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.