Let's Talk

WEC (Windows Event Collector)

Description: A server configured to collect Windows events from remote computers. It receives events via WEF (Windows Event Forwarding) without requiring an agent to be installed on the clients.

NXLog Agent provides the Windows Event Collector input module, which allows it to serve as a WEC server on both Windows and Linux platforms. In addition to collecting events from WEF clients, it provides functionality to trim, filter, and normalize events before sending them to a central repository, such as NXLog Platform.
Also known as: WEC server, Windows event log collector, Windows log collector
See also: Centralized Windows log collection - NXLog Platform vs. WEF
Setting up a Windows Event Collector (WEC) on Linux

A

Agent-based log collection

Agentless log collection

Agent management

Automatic enrollment

B

C

CEF (Common Event Format)

CSV (Comma-separated Values)

Customer portal

D

DNS (Domain Name System)

E

Endpoint security

EPS (Events Per Second)

ETW (Event Tracing for Windows)

Event correlation

F

G

GELF (Graylog Extended Log Format)

I

ICMP (Internet Control Message Protocol)

IDS (Intrusion Detection System)

J

JSON (JavaScript Object Notation)

K

KVP (Key-Value Pair)

L

LEEF (Log Event Extended Format)

Log centralization

Log normalization

M

Multi-line logs

N

O

P

PCI-DSS (Payment Card Industry Data Security Standard)

R

S

SIEM (Security Information and Event Management)

SNMP (Simple Network Management Protocol)

Structured logging

T

TCP (Transmission Control Protocol)

TLS (Transport Layer Security)

U

UDP (User Datagram Protocol)

W

W3C Extended Log File Format

WEC (Windows Event Collector)

WEF (Windows Event Forwarding)

Windows event ID

WMI (Windows Management Instrumentation)

X