Can The Windows Agent or Event Collector (WEC) Capture .etl Files?
说明
Can the Syslog-ng Agent for Windows or the Windows Event Collector (WEC) capture .etl files?
解决办法
Unfortunately, at this time, this is not possible using either the Syslog-ng Agent for Windows or the Windows Event Collector (WEC).
The Syslog-ng Agent for Windows can only capture local flat files (i.e. .txt files) while the WEC can only collect events written to the Windows Event Container.