Useful Links on how to setup and use WiNC & Windows Event Forwarding feature

  • Document ID:KM01735593
  • Creation Date:13-Jul-2015
  • Modified Date:09-Jun-2016
    • Micro Focus Products:
      arcsight smart connectors

Summary

A List of links to assist you with information to set up and use the Windows Event Forwarding feature, and also the link to our WiNC config guide

Reference

WiNC Guide:

https://protect724.hp.com/docs/DOC-12164

Windows Event Collector
https://msdn.microsoft.com/en-us/library/windows/desktop/bb427443%28v=vs.85%29.aspx

Event Subscriptions
https://technet.microsoft.com/en-us/library/cc749183.aspx

Setting up a Source Initiated Subscription
https://msdn.microsoft.com/en-us/library/windows/desktop/bb870973%28v=vs.85%29.aspx

Windows Remote Management (WinRM) Overview (2012, 2012 R2)
https://technet.microsoft.com/en-us/library/dn265971.aspx

Configure Remote Management in Server Manager (2012, 2012 R2)
https://technet.microsoft.com/en-us/library/hh921475.aspx

Installation and Configuration for Windows Remote Management
https://msdn.microsoft.com/en-us/library/aa384372%28v=vs.85%29.aspx

Remote Management with Server Manager
https://msdn.microsoft.com/en-us/library/dd759202.aspx

I have found also a good explanation and steps with screenshots here:

Centralizing Windows Events with Event Forwarding
http://www.aspirantinfotech.com/sg/download/avecto/brochure/EventCentralization.pdf

Spotting the Adversary with Windows Event Log Monitoring
https://www.nsa.gov/ia/_files/app/spotting_the_adversary_with_windows_event_log_monitoring.pdf