Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to forward Windows Events Logs from all my desktop clients to a Linux box with rsyslog on.

Rsyslog provide a Windows agent to do just that but its 40 euros per license and when you have x amount of machines that cost adds up.

I was wondering if there is a FOSS alternative available I have tried searching the Google but haven't managed to find anything.

Hopefully someone might already faced this same problem and are using an alternative that they could recommend.

share|improve this question
up vote 3 down vote accepted
  1. Snare Agent for Windows
  2. Datagram SyslogAgent
  3. eventlog-to-syslog
share|improve this answer
Brilliant, thanks very much. – SamCulley Aug 30 '12 at 12:35

You might be also interested in nxlog as it provides a wealth of features such as rfc5424 syslog format, TLS/SSL, filtering, rewrite, etc. (note: I'm affiliated with the project).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.