WMI - Tracking logs that show data source sent logs to SIEM
Is there a Windows Event Number or a method to track when the data source sends logs to the SIEM via WMI? We are using a domain user to connect to the data source. I want to see when the data source communicates with the SIEM to send WMI logs, but from the data source perspective. Thank you in advance!
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.