Quantcast
Channel: Questions in topic: "universal-forwarder"
Viewing all articles
Browse latest Browse all 1551

Why are the Index and SourceType names in our Active Directory forests not matching?

$
0
0
We have two Active Directory forests in our enterprise with Universal Forwarders installed on all of our domain controllers. The sourcetype and index names in one forest do not match up with the sourcetype and index names of the other forest. Why is that and how can I get the names to be the same? I don't want to have to build different reports for the same thing because the sourcetype and index names are different. SourceType name in Forest A: "wineventlog" SourceType name in Forest B: "main" Index name in Forest A --> "XmlWinEventLog: Security" Index name in Forest B --> "WinEventLog:Security"

Viewing all articles
Browse latest Browse all 1551

Trending Articles