David Day
- Total activity 9
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 1
- Subscriptions 3
Activity overview
Latest activity by David Day-
David Day commented,
I performed a test yesterday in an attempt to pull Windows Event logs from non-domain joined systems located in our DMZ. This was a test in order to not have to use the specific machine name in th...
-
David Day created a post,
Windows Event Logs on standalone server
I have several servers in a DMZ that are not part of a domain. Domain is a required field for the Windows Event Log source for remote capture. Is there a way around using a domain name? Thanks.
-
David Day commented,
I really like this query, even better than the one I found that did a count of the logs with a time difference. What would be great is if there would be a way to also include the count of logs. T...
-
David Day commented,
Graham, Thanks. That was exactly what I was looking for.
-
David Day created a post,
List of unique sourceHosts in a sourceCategory
I am trying to get a list of IP addresses that are reporting to a particular sourceCategory. I have tried several options and the best I can come up with is: _sourceCategory=prod/network| count_f...