Agent for Microsoft Windows platforms

The syslog-ng Agent for Windows is a log collector and forwarder application for Microsoft Windows platforms, including Windows Vista and Windows Server 2008. It collects the log messages from eventlog groups and log files and forwards them to a syslog-ng server using regular or TLS-encrypted TCP connections. The syslog-ng Agent can be managed from a domain controller using group policies, or run as a standalone application.

Main features

• Reads messages from eventlog groups and log files.
• Transfers log messages using TCP.
• Supports TLS encryption.
• Authenticates the server using X.509 certificates. Mutual authentication is also supported.
• The format of eventlog messages can be customized using macros.
• Supports multiple destinations both in parallel and fail-over modes.
• Can be managed from a domain controller using group policies.
• Unique message IDs.