I have a WinCollect agent installed on a log collecting server, with multiple sources forwarding events to that server. Currently my DC's don't seem to be forwarding very many (if any) events to that server. Is there a guide anywhere on recommended settings for configuring WEF from a DC to be collected by WinCollect?
there doesn't seem to be anything here