Does any one use Intel ESM to collect windows endpoint events (not server)?
If you do, how do you define the endpoints on the receiver?
Trying to define them all is insane and the number and IP addresses will change regularly,
The Hostname option using WMI is equally difficult.
I really don't want to deploy another agent if I don't have to.
Just about all of the competitors have an endpoint auto-discovery available, I don't see anything like this in ESM. Asset management does not help with end point data source addition.