Can anyone help me to understand how I can I use windows logs in Security Analytics features.
Can you help me with the steps.
I have an agent which collects windows event logs and sends it to Opensearch.
Also provide detail on how to generate alerts and how these mapping work internally.
Kindly advise.