OK, so here's the scenario. Due to internal company policy I cannot install native LEM agent on our Domain Controller (Windows 2012). So that means I cannot just add this node to LEM console and start collecting events, set up rules, etc, etc... Now, instead, I was offered the following workaround - run a scheduled task on DC every few hours and export the Security Event Log from DC to another location where I can go and grab it and - if possible - import into LEM. The Security Event Log can be exported in CSV format or native format.
I've scanned the LEM User manual and the messages on Thwack here, but I am not sure if this is supported. Is it? How can I import this data into LEM? The location where it is being exported to is on a file server which does have LEM agent up and running. Does it matter? Should I contact support to help me with this setup?
Thanks.