Forum Discussion

Copper Contributor

Dec 11, 2020

How to differentiate Success and Failure Audit logs in Security Events (for events like 4723)?

The builtin connector for Windows 'SecurityEvent' is not logging the property 'Keyword' which is generally used to classify the Security Events to Success and Failure Audit. We have a requirement...

CliveWatson

Former Employee

Dec 11, 2020

VidhyaChristopher this is a known issue and is being looked at.

grmccauley
Copper Contributor
Apr 12, 2023
This has been a known issue for almost 2.5 years now. Any idea when a fix will be available?
- Clive_Watson
  Bronze Contributor
  Apr 13, 2023
  https://feedback.azure.com/d365community/idea/4aa534ab-ac25-ed11-9db2-000d3a4d93f5 It looks like the request was declined. BTW, I'm no longer at Microsoft, so I don't know any more than the above.
Manb4t
Copper Contributor
Jul 20, 2021
Is there any update on this one Clive? Does switching to AMA rectify the issue?

Thanks
VidhyaChristopher
Copper Contributor
Dec 13, 2020
Thank your for the reseponseCliveWatson.Hope to see the solution soon!