3 Replies Latest reply on Oct 31, 2016 11:29 AM by paul.k

    Windows Endpoint event collection

    paul.k

      Hi,

       

      Does any one use Intel ESM to collect windows endpoint events (not server)?

       

      If you do, how do you define the endpoints on the receiver?

       

      Trying to define them all is insane and the number and IP addresses will change regularly,

       

      The Hostname option using WMI is equally difficult.

       

      I really don't want to deploy another agent if I don't have to.

       

      Just about all of the competitors have an endpoint auto-discovery available, I don't see anything like this in ESM. Asset management does not help with end point data source addition.

       

      Thank you,

       

      Paul