I have Splunk setup with the universal forwarder installed on all of my Windows machines sending the event logs to Splunk. Collecting all of the event logs with Splunk is working great. Now I was ...

SIEM and SOAR allow enterprises to collect and correlate log event data but may not be the ideal choice for every organization. Microsoft’s Windows Event Forwarding aggregates system event logs from ...

Good topic, I'd like to hear some ideas on this as well. I played around with the free version of Splunk a couple years ago and really liked it. You might want to post this in Windows Technical Mojo.