lvferdi01/30/2019, 5:07 PM
above to subscribe to the events I am not able to subscribe. nxlog and winlogbeat are unable to locate the logs with that identifier
packetzero01/30/2019, 5:28 PM
lvferdi01/30/2019, 7:28 PM
as your provider/channel you can read the WEL osquery channel.
and the rest of the json isn’t being read. But that is likely my parser