Add Active Directory lookup update script
Use this sample update script to add the Active Directory lookup values for your log source.
The Active Directory lookup converts GUIDs to real object names. This script updates the
Domain Controllers remote source group and changes the Security
source to include the AD Domain Controller and the AD DNS name to
use to make the lookup.
<?xml version="1.0" encoding="UTF-8"?>
<WinCollectScript version="10.0.1" >
<Update objPath="RemoteSources(Name=Domain Controllers)/Source(Name=Security)" >
<Parameter name="AD_Controller" value="yourdc.yourdomain.lab" />
<Parameter name="AD_DNSDomain" value="youdomain.lab" />
<Parameter name="AD_Lookup" value="true" />
</Update>
</WinCollectScript>