Overview

This section lists the minimum set of Event IDs (logs) at least need to be forwarded to the Motadata AIOps. The required Event IDs are determined by the specific server role(s) enabled on the system. Ensure these logs are forwarded for proactive issue resolution by the Motadata AIOps.

Mandatory Event IDs to Forward

When enabling log forwarding, ensure that the following Event IDs are collected for the corresponding server role(s):

1. Active Directory Domain Services
2. Active Directory Certificate Services
3. Active Directory Federation Services
4. Active Directory Rights Management Services
5. DNS Server
6. File and Storage Services
7. Network Policy and Access Services
8. Remote Access (RRAS / VPN / DirectAccess)
9. Web Server (IIS)
10. FTP Server
11. DHCP
12. FAX Server
13. Host Guardian Service (HGS)
14. Hyper-V
15. MultiPoint Services
16. Volume Activation Services
17. Windows Deployment Services
18. Windows Server Essentials Experience (WSEE)
19. Windows Server Update Services (WSUS)
20. Device Health Attestation (DHA)
21. Print and Document Services
22. Windows Defender / Security Service
23. Failover Clustering
24. Remote Desktop Services (RDS)
25. Windows Admin Center / Management Tools
26. Network Controller / SDN
27. Storage Replica
28. Windows Time / NTP Services