Forum Discussion
gabormicskei
Apr 15, 2020Copper Contributor
on perm fileserver delete logs to cloud app security
Hi all,
Is there any way to send the delete file logs from on perm fileserver to CAS ?
Thanks.
Gabor
2 Replies
Sort By
- Joe StockerBronze ContributorI think what you are asking is if it is possible to monitor and alert when someone clears the security event log (Event ID 517 and 1102).
Cloud App Security won't do that for you, but Azure Sentinel or Azure Log Analytics will:
https://docs.microsoft.com/en-us/azure/sentinel/connect-windows-security-events- gabormicskeiCopper Contributor
Thanks, I did this in the meantime Joe Stocker