Currently the Windows Event Collector (WEC) feature which has been released for Syslog-ng PE version 7 is not directly compatible with Syslog-ng Store Box (SSB)
Enhancement request SSB-3326 has been submitted to Development for consideration in a future release of Syslog-ng Store Box.
if the Windows Event Collector feature is required for Syslog-ng Store Box, then a Syslog-ng PE relay server could be installed.
This would collect the logs from the Windows hosts and then forward them to the Syslog-ng Store Box.
Information on setting up a Syslog-ng relay can be found in the administration guide.