Forum Discussion
DCR xPath - Nomenclature modification?
Hello, I have a question regarding the custom (xPath) configuration when creating a DCR for Windows Security Events via AMA Below is the xPath I was using until now to exclude the following EventID...
same issue here, Custom Collection rule does not work, we have changed to minimal collection until problem is solved