Ctrlk
BlogSupport
For the complete documentation index, see llms.txt. This page is also available as Markdown.
Cortex XDR 5.x

Validate log collection for LDAP Server events

Verify Cortex XDR collects LDAP server event logs.

View the LDAP Server Events logs.

  1. From the Start menu, open Event Viewer.

  2. Go to Application and Services Logs → Directory Service.

  3. Filter for Event ID 1644.

PreviousEnable LDAP server events logging using GPO
NextLearn more about migrating to the latest Broker VM image

Last updated

Was this helpful?