RDP log retrieving on FortiPAM

Using event filter profiles, FortiPAM can retrieve specific logs for events that occurred during an RDP session from a target.

For information on WinRM configuration of the target machine, see Appendix L: WinRM configuration for Windows server in the latest FortiPAM Administration Guide.

To configure RDP log retrieval on FortiPAM:

1. Creating an event filter profile
2. Creating a secret target
3. Creating a secret policy
4. Creating secret with an RDP event filter profile
5. Launching the secret
6. Checking the RDP logs