SIEM Search Expressions and Windows Event Logs

Hi All,

I got an problem open the lab. When you launch the lab its open the Windows michine.

Yes, that’s normal behavior. The first step in the instructions is to switch to the Wazuh machine using the Machines tab.

The lab is still loading in this screenshot, but once it has finished you can click the Wazuh tile to connect to that machine.

Thank you very much. What i realized is the there are no machine tab on both Exercese guide.

The Machines tab will not appear until you click Start Lab.

Thank you. Was my distraction