Event filter profile
The Event Filter Profile tab in Secret Settings displays a list of event filter profiles.
Using event filter profiles, FortiPAM can retrieve specific logs for events that occurred during an RDP session from a target.
|
The feature is agentless and relies on FortiPAM configuration, the WinRM service status, and the window audit policy on the target remote machine. |
For each event filter profile; name, process log, file system log, user management event log, and references are displayed.
|
|
A default default_app_log event filter profile is available. |
The Event Filter Profile tab contains the following options:
|
Create |
Select to create a new event filter profile. See Creating an event filter profile. |
|
Edit |
Select to edit the selected event filter profile. |
|
Delete |
Select to delete the selected event filter profiles. |
|
Search |
Enter a search term in the search field, then hit |