How to monitor Windows event logs in Checkmk

My default Logwatch section looks like this.

logwatch:
  enabled: true
  logfile:
    - application: warn nocontext
    - system: warn nocontext
    - "*": off context

What you posted is the example config where all the entries are disabled.

1 Like