I'm looking to use Kiwi for a small windows environment and had a question regarding the collection. I was wondering what best practice is for forwarding the events to the syslog server. I would prefer to not install the windows event forwarder on all of the servers (about 25). Is it possible to create a windows subscription and then forward all from that host to Kiwi?
Thank!