topic Collecting Windows Logins Events - Specifically what server/workstation they were remoting into in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Collecting-Windows-Logins-Events-Specifically-what-server/m-p/398391#M71036 <P>I'm currently collecting windows security events. And it's been good for seeing failures. But I cannot see 'what' workstation or server they attempted to log into.</P> <P>Does anyone have any advice on how to capture this piece of information?</P> Tue, 16 Jul 2019 18:53:42 GMT TitanAE 2019-07-16T18:53:42Z Collecting Windows Logins Events - Specifically what server/workstation they were remoting into https://community.splunk.com/t5/Getting-Data-In/Collecting-Windows-Logins-Events-Specifically-what-server/m-p/398391#M71036 <P>I'm currently collecting windows security events. And it's been good for seeing failures. But I cannot see 'what' workstation or server they attempted to log into.</P> <P>Does anyone have any advice on how to capture this piece of information?</P> Tue, 16 Jul 2019 18:53:42 GMT https://community.splunk.com/t5/Getting-Data-In/Collecting-Windows-Logins-Events-Specifically-what-server/m-p/398391#M71036 TitanAE 2019-07-16T18:53:42Z