Forum Discussion
Solved
Getting Windows Events
Hi folks, I'm trying to create a query to hunt newly created "Allowed Ports" in windows firewall on a vm. The monitoring agent is installed and running, but un-fortunately event id 2004/ firewa...
nafejeries Based on my testing you are definitely looking at the correct log source. How long have you waited to see if the data shows up?
Update: I added that same log to my Windows Events, created a new Firewall rule, and I did see the value show up in the Event Table
I have add the firewall path from Advanced settings, but still the events are not flowing.
ā
nafejeries Based on my testing you are definitely looking at the correct log source. How long have you waited to see if the data shows up?
Update: I added that same log to my Windows Events, created a new Firewall rule, and I did see the value show up in the Event Table