Tools

Log Forwarder for Windows

Event Log Forwarder for Windows is a tool that runs on a Windows system, forwarding event log records to a Syslog Server via UDP (User Datagram Protocol) or TCP (Transmission Control Protocol).

First published date

10/12/2018 7:24 PM

Last published date

3/23/2022 6:05 PM

Overview

Event Log Forwarder for Windows is a tool that runs on a Windows system, forwarding event log records to a Syslog Server via UDP (User Datagram Protocol) or TCP (Transmission Control Protocol). 

 

It can be used to send syslog messages to NPM Server or Kiwi Syslog Server.

Product section

Kiwi Syslog Server

Resolution

Event Log Forwarder for Windows is a tool that runs on a Windows system, forwarding event log records to a Syslog Server via User Datagram Protocol (UDP) or Transmission Control Protocol (TCP).

 

Event Log Forwarder for Windows comprises of two standard application executables (.exe):

  • The Service (LogForwarder.exe)
  • The User Interface (LogForwarderClient.exe)

 

Event Log Forwarder for Windows Service is named "SolarWinds Event Log Forwarder for Windows" and is installed and started during the installation process. To check or to manage Event Log Forwarder for Windows Service (start, stop, restart etc.) is via Windows Services manager or Windows command prompt: Net Start "ServiceName".

 

The Event Log Forwarder for Windows User Interface (UI) allows you to configure the Service, can (depending on which options were selected during installation) be opened using the SolarWinds Event Log Forwarder for Windows desktop shortcut item, the Quicklaunch item, or from the SolarWinds Event Log Forwarder for Windows Program group accessible from the Windows Start button.

 

Event Log Forwarder for Windows supports forwarding of both Windows Eventing 5 and 6 event records.

  • Windows eventing 5 Event Log records - > Windows O/S versions prior to Windows Vista and Windows Server 2008
  • Windows eventing 6 ("Crimson") Windows Event Log records - > versions of Windows-based on the Windows NT 6.0 kernel (Windows Vista and Windows Server 2008, 2012)