Hi,
Well, remember, the agent picks up only new messages in the log, after it’s started. So any messages that are already in it are ignored. Add some more messages that should trigger an event when the agent is running.
Then from you CheckMK server run:
nc -v <windows server> 6556
In the output you should see the new messages appearing under <<<logwatch>>>
Kind regards,
Louis