Hi Nic,
Depending on your use case, it may be preferable to ignore the Windows logs via a Checkmk rule rather than disabling them on each agent.
We use the following rule to ignore all logwatch checks:
The downside to this approach is that the logwatch information is still sent over the wire, which is effectively wasted bandwidth. The upside is that we do not have to manually configure the agent on each server to disable the logwatch checks.
Hope this helps,
Jason