Forum Discussion

simonepatonico's avatar
simonepatonico
Brass Contributor
Feb 05, 2020

Issue collecting Windows Firewall Events

Hi community, I have a problem to collect Windows Firewall events from my Windows 10 VMs. I enabled the Windows Firewall connector in Sentinel, installed the MMA (64-bit version 10.20.18018.0) on t...
Rod_Trent's avatar
Rod_Trent
Icon for Microsoft rankMicrosoft
Feb 05, 2020

simonepatonico A couple quick questions...

 

How long did you wait for the data to show up?

 

Did you verify that the Log Analytics agent is configured and assigned to the correct Log Analytics workspace?

  • simonepatonico's avatar
    simonepatonico
    Brass Contributor
    Feb 05, 2020

    Rod_Trent 

    I waited for more than 24 hours and still nothing.

     

    Yes I configured the correct workspace, indeed the Security Events are coming in the Log Analytics Workspace.

      • simonepatonico's avatar
        simonepatonico
        Brass Contributor
        Apr 30, 2020

        WouterStinkens Yes, you need to reduce the size of the log file to few KB. I reduced it to 2 KB and it works!

Resources