Idea ID: 2789934

AD parser should parse "Service Name" from event "A Kerberos service ticket was requested

Status : Delivered
over 4 years ago
Hi,
I think AD parser need an enhancement. It should parser "Service Name" from event "A Kerberos service ticket was requested". Usually that field contains an account name, that can be used to track authentications. Now that is not parsed at all.

We have an customer use-case and this is needed urgently.

Tags: