Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Adding a Log Source to a WinCollect Agent

If you configure a log source that uses a WinCollect plug-in, you must read the requirements and prepare the third-party device. For more information, see WinCollect plug-in requirements.

When you add a new log source to a WinCollect agent or edit the parameters of a log source, the WinCollect service is restarted. The events are cached while the WinCollect service restarts on the agent.

  1. Click the Admin tab.
  2. On the navigation menu, click Data Sources.
  3. Click the WinCollect icon.
  4. Click Agents.
  5. Select the WinCollect agent, and click Log Sources and then click Add.
  6. Choose one of the following options:

    • For a WinCollect log source, select Microsoft Windows Security Event Log from the Log Source Type list and then select WinCollect from the Protocol Configuration list.

    • For a WinCollect plug-in select the WinCollect plug-in option from the Log Source Type list, and then configure the specific parameters. For information about these parameters, see the configuration options for log sources that use WinCollect plug-ins.

  7. Configure the generic log source parameters.
  8. Click Save.
  9. On the Admin tab, click Deploy Changes.

Related Documentation