Events sent to Azure workspace for monitoring RRS feed

  • Question

  • We have finally sent the ADFS event to a workspace in Azure. We are able to see a majority of event in the workspace but we are unable to see two event off the ADFS sever that we need to process. We need the event 307 and 510. we need those two to monitor any changes to our Relying Party Trust and certificates. We are not able to find them doing queries to pull the data. Is there a way to send those event to Azure or is there a way to pull them from the workspace. 

    Can we create a custom configuration to send them to azure?

    thank you all...

    Wednesday, February 26, 2020 9:34 PM