Simple (better) local check; Monitor windows event logs\ID's

I would argue that once log forwarding to the event console is properly set up it is much easier to define new rules there (and more flexible) than to modify a local check that has to be distributed to 1400 hosts.

4 Likes