Hello,
In my configuration file I have used the following section:
common:
path_prefix: /tmp/loki
storage:
filesystem:
chunks_directory: /tmp/loki/chunks
rules_directory: /tmp/loki/rules
When Grafana Alloy sends Windows Event Logs to the server, where and how is this information stored? For example, Windows Event Logs are as follows:
A handle to an object was requested.
Subject:
Security ID: DESKTOP-1PNH21K\Grafana
Account Name: Grafana
Account Domain: DESKTOP-1PNH21K
Logon ID: 0x36BB2
Object:
Object Server: Security
Object Type: File
Object Name: C:\Users\Grafana\Desktop\Test
Handle ID: 0x2f50
Resource Attributes: -
Process Information:
Process ID: 0x1100
Process Name: C:\Windows\explorer.exe
Access Request Information:
Transaction ID: {00000000-0000-0000-0000-000000000000}
Accesses: READ_CONTROL
ReadAttributes
Access Reasons: READ_CONTROL: Granted by Ownership
ReadAttributes: Granted by D:(A;OICI;FA;;;S-1-5-21-2104788189-4142446361-3889847816-1001)
Access Mask: 0x20080
Privileges Used for Access Check: -
Restricted SID Count: 0
How do I see the above information on the server?
Thank you.