This procedure is useful for verifying that you have configured Windows Legacy Collection correctly. If it is not configured correctly, it cannot work the way it should.
Return to Procedures
The following procedure explains how you can verify that Windows Legacy collection is working from the Administration > Health & Wellness > Event Source Monitoring tab.
- In the Security Analytics menu, select Administration > Health & Wellness.
- Click the Event Source Monitoring tab.
- In the grid row for the Windows Legacy event source type, look for activity in the Count column to verify that Windows Legacy collection is accepting events.