Keyword attribute/field not populating in latest version of AMA

[Dhaval8951]

Hi Azure Team

Greetings !

I am writing this query regarding one field that should be generated by AMA Security Event Logs.
I have previously raised the query for same and that sounds the issue to the AMA which was later fix and I can see that documentation is also updated.

I have drafted this issue : #121325

The documentation updated I can see from below screenshot of this document: https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-sources-windows-events

I understand from above image that issue is fixed.
When I am generating Logs from AMA, The Keyword field for Success Audit or Failure Audit still not populating.
Could you please provide any specific configuration steps which required to be followed to have this field in AMA windows logs.

Any help / guidance would be greatly appreciated.

Regards,
Dhaval C.

[PesalaPavan]

@Dhaval8951
Thanks for your feedback! We will investigate and update as appropriate.

[TPavanBalaji]

@Dhaval8951
Thank you for bringing this to our attention.
I've delegated this to content author, who will review it and offer their insightful opinions.

[guywi-ms]

#reassign: @rboucher