I am trying to see if it is feasible to parse MS Exchange CAS logs into NetWitness. I am running 11.3.1 and run Exchange 2016. If anyone can steer me in the right direction, I would appreciate it.
Hi Eric Schwartz,
Does CAS logs written to Windows Event Viewer?
if yes, you can try Microsoft Exchange Server Event Source Configuration Guide for windows event collection.
Retrieving data ...