Validate log collection for LDAP Server events

Validate LDAP server Event ID 1644 collection in Windows Event Viewer for Cortex XSIAM.

View the LDAP Server Events logs.

1. From the Start menu, open Event Viewer.
2. Go to Application and Services Logs → Directory Service.
3. Filter for Event ID 1644.