I was wondering if someone could help me figure out where LE is pulling logs from.
I got this to try and help me figure out how / where various accounts are getting locked out from. I have numerous scripts for this scraping event logs across the environment and until recently I've always been able to find this data. So i was wondering if this could see something i didn't know to look for.
Sure enough when examining one of these accounts its finding all sorts of invalid logons in various locations but i can't find any logs that show it.
Where exactly is LE actually pull these logs from?