name: Windows Event Log RemoteConnectionManager
id: 7f0df187-53bc-4a6f-ada9-0ea3026b9d3b
author: Patrick Bareiss, Splunk
source: WinEventLog:Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational
sourcetype: wineventlog
separator: EventCode
supported_TA:
  name: Splunk Add-on for Microsoft Windows
  version: 8.8.0
  url: https://splunkbase.splunk.com/app/742
event_names:
- event_name: Windows Event Log RemoteConnectionManager 1149
  data_source: data_sources/endpoint/event_sources/Windows_Event_Log_RemoteConnectionManager_1149.yml