We have configured a universal forwarder on 4 Domain Controllers in our environment.
Now, we receive security events in real time on 3 Domain Controllers. The 4th DC has a lag of around 20 minutes to appear.
I am wondering if anyone has come across this issue or is there any configuration which I might have missed out.
Thanks,
↧