We have a few connectors here who collect Windows Event Log data from multiple servers.
The account used to access said server is defined as Domain Administrator. I am being asked to investigate and see if the user absolutely needs Domain Admin privileges,
Can anyone direct me to documentation that could help me in finding what I need. I have looked into a few ArcSight Active Directory config guided but have yet to find anything.
Thank you for any information you may provide.