User Guide: Event Log Forwarder For Windows (Version 1.2).pdf

# Event Log Forwarder for Windows User Guide (Version 1.2)

## Overview
SolarWinds Event Log Forwarder (Log Forwarder) is a powerful tool designed to streamline the process of monitoring and managing Windows event logs by forwarding them to a syslog server. It supports both Windows Eventing 5 and 6, enabling efficient data export, filtering, and distribution for enhanced system management and security.

## Key Features
- Automatic Event Forwarding: Log Forwarder swiftly and automatically sends events from workstations and servers to your syslog server via UDP or TCP.
- Event Data Export: It exports event data from Windows servers and workstations, providing a centralized view of system activities.
- Customized Filtering: Events can be filtered based on source, event ID, and specific keywords, allowing for precise control over the forwarded data.
- External System Integration: Log Forwarder facilitates the sending of events to external systems for alerting, storage, and auditing purposes.
- Multi-Server Support: It supports forwarding events to multiple servers, enhancing system redundancy and coverage.

## Supported Operating Systems
Log Forwarder is compatible with various Windows versions:
- Windows 10 (both x86 and x64 editions)
- Windows 8/8.1
- Windows 7/7 SP1
- Windows Server 2016
- Windows Server 2012/2012 R2
- Windows Server 2008/2008 SP2/2008 R2/2008 R2 SP1
- Windows Server 2003 R2 SP2

## Installation and Configuration
The guide provides detailed instructions on installing, configuring, and managing Log Forwarder, covering:
- System requirements and hardware/software prerequisites.
- Installation process, including server preparation and step-by-step installation.
- Configuring Log Forwarder settings, including event log subscriptions and syslog server settings.
- Managing subscriptions, adding, enabling/disabling, renaming, and editing subscription properties.
- Testing and troubleshooting for seamless operation.