Skip to content

How to configure Cyberquest to collect MS exchange tracking logs

To collect log events from MS exchange tracking logs, the following prerequisits must be met:

  • Copy the exchange tracking logs to CQ Monitored folder.
  • Edit “exchangeTrackingLog1.xml” (which can be found at C:\Program Files\CyberQuestAgent\templates), and modify the following TAG:
 <add name="monitorFolder" value="C:\\ImportedTrackingLogs\\Exchange1"/>