How to configure Cyberquest to collect MS exchange tracking logs
To collect log events from MS exchange tracking logs, the following prerequisits must be met:
- Copy the exchange tracking logs to CQ Monitored folder.
- Edit “exchangeTrackingLog1.xml” (which can be found at C:\Program Files\CyberQuestAgent\templates), and modify the following TAG:
<add name="monitorFolder" value="C:\\ImportedTrackingLogs\\Exchange1"/>