Issue pulling events in through WiNC
In an effort to phase out anything dealing with SMBv1, we have discontinued the use of WUCs. That being said, have created rought 14 Windows Event Collectors Virtual Machines with an average of 3 WiNC connectors per WEC (Member Servers, Domain Controllers and Workstations). The majority of those devices fall within the same domain; however, there are various other devices that fall under other domains outside of the main domain forest. Since these other domains do not fall within the main domain forest (the domain of the WEC servers), I am unable to add them to the subscriptions I have set up...
That being said, I tried adding them to the WiNCs table parameters to pull the events in directly like it were a WUC using the service accounts of those other domain devices. This is not working though. I have all ports opened in the firewall, so it's not being dropped. It almost seems like the authentication request isn't making it to the devices.
Is there anyone else out there that is using the WiNC as a WUC? If so, is there anyone that is using the WiNC as a WUC and pulling in from multiple domains?
Thanks for any and all help!