Adding Additional Windows Facility to Winrm
In the following document, on Determine the Channel Name and Add It to a Windows Event Source, when adding a specific Channel, does the winrm only pick up the configured channel added? Or does it continue to pick up the default , security/system/application logs?
- Community Thread
- Forum Thread
- netwitness for logs
- RSA NetWitness
- RSA NetWitness Platform
Yes, by default, if nothing is provided, it will grab Security/System and Application, but if you add anything there, only that is taken as Channel filters.