RDP log retrieving on FortiPAM

Using event filter profiles, FortiPAM can retrieve specific logs for events that occurred during an RDP session from a target.

For more information on the feature, see 900367- Event filter profile in the FortiPAM 1.2.0 Administration Guide.

For information on WinRM configuration of the target machine, see Appendix L: WinRM configuration for Windows server in the latest FortiPAM Administration Guide.

To configure RDP log retrieval on FortiPAM:

1. Creating an event filter profile
2. Creating a secret target
3. Creating a secret policy
4. Creating secret with an RDP event filter profile
5. Launching the secret
6. Checking the RDP logs