任何人,请指导如何将Windows计算机(而不是Machine EventLog)上的自定义日志发送到AlienVault并显示在图形中。
<Event>
<System>
<CustomField1>YOUR_COMPUTER</CustomField1>
<CustomField2>YOUR_COMPUTER</CustomField2>
<Provider Name="Application" />
<EventID Qualifiers="0">1001</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-07-12T21:26:07.000000000Z" />
<EventRecordID>86554</EventRecordID>
<Channel>Application</Channel>
<Computer>YOUR_COMPUTER</Computer>
<Security />
</System>
<EventData>
<Data>Entry1</Data>
<Data>Entry2</Data>
</EventData>
</Event>
预先感谢