I am trying to see if it is feasible to parse MS Exchange CAS logs into NetWitness. I am running 11.3.1 and run Exchange 2016. If anyone can steer me in the right direction, I would appreciate it.
Thanks
Eric S
I am trying to see if it is feasible to parse MS Exchange CAS logs into NetWitness. I am running 11.3.1 and run Exchange 2016. If anyone can steer me in the right direction, I would appreciate it.
Thanks
Eric S
Hi Eric Schwartz,
Does CAS logs written to Windows Event Viewer?
if yes, you can try Microsoft Exchange Server Event Source Configuration Guide for windows event collection.