FortiSIEM - Windows Powershell

[isuru]

Hi,

We are trying to integrate Windows PowerShell logs using the FortiSIEM Windows agent and currently, we have configured Powershell Operational logs. But we have an issue with the given Windows Powershell Event logs where they are not parsing.

We would like to know whether the issue is with our configuration or a parser.

Cheers,
Isuru

[FSM_FTNT]

Hi Isuru,

Do you have any sample events that you can share?

Thanks

Dan

[isuru]

Hi Dan,

Please find the Sample Logs herewith.

Cheers,
Isuru