Enabling Remote Event Log Management

To collect audit events, Cygna Auditor needs access to event logs on the domains controllers. Perform this operation on each domain controller in your domain.

1. Start the Windows Firewall with Advanced Security.

2. In Inbound rules, locate the following rules and enable them:

   • Remote event log management (RPC)
   • Remote event log management (RPC-EPMAP)