Forum Discussion
How to differentiate Success and Failure Audit logs in Security Events (for events like 4723)?
The builtin connector for Windows 'SecurityEvent' is not logging the property 'Keyword' which is generally used to classify the Security Events to Success and Failure Audit. We have a requirement...
This has been a known issue for almost 2.5 years now. Any idea when a fix will be available?
https://feedback.azure.com/d365community/idea/4aa534ab-ac25-ed11-9db2-000d3a4d93f5 It looks like the request was declined. BTW, I'm no longer at Microsoft, so I don't know any more than the above.