Forum Discussion

gregoval's avatar
gregoval
Copper Contributor
Nov 05, 2021
Solved

Sentinel - Windows Forwarded Events Connector Ingestion issue

Hello,   In Microsoft Sentinel we have enabled the "Windows Forwarded Events (Preview)" Data Connector but no logs are coming.  Here are the details of the setup:   Windows Server 2019 (Azure Ar...
  • CliveWatson's avatar
    Nov 05, 2021
    Did you try and remove the quotes, I don't have mine setup anymore but I think you don't need them? e.g.
    ForwardedEvents!*

    I assume you are aware the data goes into this Table: WindowsEvents

Resources