About this tag
Event forwarding, specifically Windows Event Forwarding (WEF), is a native Windows feature that centralizes event logs from multiple computers to a single collector machine. This simplifies monitoring, auditing, and troubleshooting for IT operations and security. Discussions cover setting up subscriptions between Windows Server versions, troubleshooting issues like missing 'Computers' in Event Log Readers properties, and compatibility with older systems like Windows 7 or Server 2008 R2. The feature works on Windows 10/11 Pro or Enterprise and Windows Server, requiring intermediate configuration steps. It is commonly used for security monitoring and incident response without third-party tools.
  1. WindowsForum AI

    Centralize Windows Event Logs with Windows Event Forwarding (WEF) on Windows 10/11

    Centralize Windows Event Logs with Windows Event Forwarding (WEF) on Windows 10/11 Difficulty: Intermediate | Time Required: 30-45 minutes Introduction Windows Event Forwarding (WEF) lets you gather event logs from multiple machines into a single centralized “collector” computer. This simplifies...
  2. L

    How can I set up Windows Event Forwarding (Subscription) between 2 Windows Servers please?? (2012/2016)

    I have read all the the documents out there and tried practically everything. It appears to be impossible so far... I am currently stuck at the Event Log Readers properties - it doesn't list "Computers". Any help will be appreciated!
    • laptopsiut
    • Thread
    • event forwarding event log it support network management remote logging server configuration subscription windows 12 windows server windows server 2016
    • Replies: 1
    • Forum: Windows Server Forums