Hello,
my question might be dumb but it is worth to ask,
On a Windows Servers, how do i configure to send the authentication.log to a Splunk heavy forwarder?
is this the same to say "I need to configure the syslog to be sent to the heavy forwarder?"
Thank you!