Collect events from remote computers on a collector computer
Collect events from remote computers via subscriptions, and store them in a combined local event log. Cribl’s integration can replace multiple Windows Event Collector (WEC) servers, offering better scaling and simplified administration.
How Does It Work
This is a built-in integration via Cribl Stream’s/Edge’s Windows Event Forwarder Source.
Send Windows Event Collector logs to Cribl Stream/Edge.
Configure Cribl Stream/Edge to read the incoming data via Sources > Windows Event Forwarder.
Specify your Input ID, Address, Port, Private key path, and other parameters.
Cribl Stream/Edge will start receiving data as it becomes available.
Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy. Customers use Cribl’s suite of products to collect, process, route, and analyze all IT and security data, delivering the flexibility, choice, and control required to adapt to their ever-changing needs.
We offer free training, certifications, and a free tier across our products. Our community Slack features Cribl engineers, partners, and customers who can answer your questions as you get started and continue to build and evolve. We also offer a variety of hands-on-Sandboxes for those interested in how companies globally leverage our products for their data challenges.
