In a Windows Server I've installed a SIEM Collector.
When I try to configure a data source (generic log tail), validate and apply, the service creates a new folder in plugins folder, but there isn't a bookmark file and the data source without this bookmark doesn't report anything
How can I do to create the bookmark?
Solved! Go to Solution.
They are different data sources types, but I've found the solution yesterday.
If I create an empty file, with .bookmark extension, the data source begins to report events