server logs export in CEF

Question

Hi

I need to have all logs of about 10 servers be forwarded to a collector in cef format, any idea on how to achieve this?

can I use third party software of any kind?

thanks

Answer 1

Something here may help.
https://learn.microsoft.com/en-us/azure/sentinel/connect-common-event-format

--please don't forget to Accept as answer if the reply is helpful--

Answer 2

Hi,

After research, I didn't find information to transform windows event log to ref format, while below is the information about windows event forwarding, for your reference:

https://learn.microsoft.com/en-us/windows/security/threat-protection/use-windows-event-forwarding-to-assist-in-intrusion-detection

Thanks for your time!
Best Regards,
Anne

-----------------------------

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.