I recently broke down and updated to ATA 1.9.3. from ATA 1.9.1
For some reason, events forwarded to the DC where the lightweight Gateway is installed are not making it into the MongoDB and hence not appearing on the ATA Console.
I see the event showing up in the Event Viewer on the DC. However, they do not then show up in MongoDB.
Do I need to configure something to read the Forwarded Events? (I am forwarding the usual suspects: 4776, 4732, 4733, ..7045) And I see them show up in the Forwarded logs.
I cannot find anything that needs toggling or setting to "yes".
If I do a nslookup, that generates an alert, but creating a local Admin account on a user box no such love. (the event 4732 should show up in MongoDB) I see it in the forwarded logs.
Any places to look would be most helpful.