This may be a duplicate, as i'm fishing for information, as I'm not that au fait with logging on windows. I know on Unix you can ship syslogs via the relay and RFC 5424. I also know you forward windows event logs with event subscription within a domain.
But taking an example, for the following products.
Microsoft Biztalk, Microft Exchange, Microsft Host Integration Server, Sql Server, IIS and MS Forefront. They all log but i'm more interested in Audit informations.
What I think i'm asking, does every microsoft product log to event log, or can it be set up to do so. What's best practice regarding this.