Skip to main content
OsamaFattoh
OsamaFattoh
Explorer II
July 1, 2026
Question

Collect logs from specific channel under Applications and Services logs

  • July 1, 2026
  • 1 reply
  • 24 views

Hello, How to collect specific channel from Applications and Service Logs in Event viewer using windows agent?

1 reply

Secusaurus
Secusaurus
Contributor III
July 1, 2026

Hi ​@OsamaFattoh,

 

Have you had a look at https://docs.fortinet.com/document/fortisiem/7.5.1/user-guide/68278/configuring-windows-agent ?

You'll obviously need to have some knowledge about how Windows Event Logs work in order to define/collect the right ones. What is the usecase you have that is missing in the docs?

 

Best,

Christian

 

 

NSE8 | Fortinet Advanced MSSP Partner
OsamaFattoh
OsamaFattohAuthor
Explorer II
July 1, 2026

Hello ​@Secusaurus,

I want to collect logs for example from Applications and Services Logs Section → Microsoft → Windows → Hyper-V
The template has built-in options, and the documentation doesn't specify how to collect data from a specific channel.

Terms & ConditionsAccessibility statement