User auditor -> Events timeline empty

[vitortapadas]

Hi!
I'm just starting with UTMStack and there's something I'm not able to get working. User auditor shows all my users but event timeline is empty for all of them. I think log ingestion is being well done. For the moment, I've installed UTMStack agent on both AD servers and one or two clients.

I'm using v11.2.5-community and installed the VM with the provided ISO. What am I doing wrong?

Best regards
Vitor