syslog-ng Premium Edition 7.0.31 - Windows Event Collector Administration Guide

Table of Contents

Introduction Supported platforms Authentication options Configuring Windows event logs to be forwarded to the syslog-ng Premium Edition server using WEC

Installing the Windows Event Collector Generating SSL certificates for Windows Event Collector Configuring certificate-based authentication on event source computers Configuring Kerberos authentication on Windows Server (DC) hosts Configuring Kerberos authentication on Windows domain client hosts Configuring Kerberos authentication on Linux hosts Configuring Windows Event Collector Configuring syslog-ng PE

Starting/stopping Windows Event Collector Message format in Windows Event Collector for syslog-ng PE Flow control Performance Limitations Troubleshooting Windows Event Collector

Troubleshooting Windows Event Collector if Kerberos authentication is used

WEC configuration examples

WEC configuration example for certificate-based authentication WEC configuration example for Kerberos authentication

WEC clustering in syslog-ng PE

The working mechanism of Windows Event Collector (WEC) clustering

States in WEC clustering (file-based states and Redis states)

Converting file-based states to Redis states

An example use case for WEC clustering

Troubleshooting for WEC clustering

Log messages and why the WEC sends them Checking data stored in Redis Timers on the WEC side

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2026 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center