Subscription Services ......how do I get Security Logs to forward.

I set up a new Subscription services server to collect syslogs from my environment but for some reason I cannot get the security logs to forward. I see application, setup, system logs but nothing from the security logs. Do I need to do something to get them to forward to my subscription services server?????

Windows OSMicrosoft Legacy OS

Last Comment

gmckfn

8/22/2022 - Mon

SOLUTION

Mohammed Khawaja

12/29/2014

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

GET A PERSONALIZED SOLUTION

Ask your own question & get feedback from real experts

Find out why thousands trust the EE community with their toughest problems.

gmckfn

12/30/2014

ASKER

I followed that article. I got all the windows logs to forward to my collector except for the security logs. the audit failures and success do not forward. When setting up my forwarded events I have windows application, security , setup, and system logs checked but for some reason the security logs are the only ones not showing up. is this a permissions issue??
setup.JPG

ASKER CERTIFIED SOLUTION

Mohammed Khawaja

12/30/2014

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

GET A PERSONALIZED SOLUTION

Ask your own question & get feedback from real experts

Find out why thousands trust the EE community with their toughest problems.

gmckfn

12/31/2014

ASKER

yes I did. I created a test account. gave it domain admin rights and added it to the event log readers group. then set it on the advanced tab of the subscription as seen in my attachment. I still cannot get the security logs audit success and failures to show up. also it takes awhile for the events collected from the source servers to propagate to the collector server. what is the default time for this???
ggfgg.JPG
hhhhhhh.JPG

Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!

Certified Expert Program

Credly Partnership

Udemy Partnership