For the Windows event logs you only need to configure the “check_mk.user.yml” file and there the section “logwatch”. With a default agent config you should already get all the “normal” Windows log files.
How does the output of you agent looks?
For the Windows event logs you only need to configure the “check_mk.user.yml” file and there the section “logwatch”. With a default agent config you should already get all the “normal” Windows log files.
How does the output of you agent looks?