Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Does Saviynt support forwarding Windows session events from a centralized windows server to Logstash

suresh_ravuri
New Contributor III
New Contributor III
Windows events are forwarded to a central Windows system, does Saviynt support forwarding Windows session events to Log-Stash from Centralized Windows system ?
 
If it's supported, Please provide the configuration steps.
2 REPLIES 2

NageshK
Saviynt Employee
Saviynt Employee

@suresh_ravuri Thanks for posting your question here. Yes, this is possible as long as the winlogbeat is setup on the centralized server as well and the events forwarded to the centralized server do not loose any of the information compared to when they get sent to logstath directly. 

Thanks,

Nagesh K

suresh_ravuri
New Contributor III
New Contributor III

Thank you @NageshK 

Are there any additional steps that need to be followed when capturing logs from a centralized Windows log collector ?