Hi,
Im learning how to use LEM and monitor our Infrastructure, im trying to monitor GPO changes so I can set up alerts.
I have enabled the audits for GPO (screenshot attached). However in LEM, it shows as InternalWarning with no information (Screenshot attached)
I followed advise from this thread Auditing Group Policy Changes to a T but I have a different outcome in LEM?