The Log Insight Windows Agent collects events from Windows event channels and log files, and forward them to the Log Insight server.

A Windows event channel is a pool for collecting related events in a Windows system. By default the Log Insight Windows Agent collects events from the Application, System, and Security channels.

In a Windows system, applications can store log data in flat text files on the file system. The Log Insight Windows Agent can monitor directories and collect events from flat text log files.

The Log Insight Windows Agent has a limit of 64 KB per request to the Log Insight server.

The Log Insight Windows Agent runs as a Windows service and starts immediately after installation. During and after installation, you can configure the following options for the Log Insight Windows Agent:

Select the target Log Insight server to which the Log Insight Windows Agent forwards events.

Select the communication protocol and port that the Log Insight Windows Agent uses.

Add additional Windows event channels from which the Log Insight Windows Agent collects events to.

Select Windows directories to monitor and add flat log files to collection.

The Log Insight Windows Agent requires Windows Vista or later, or Windows Server 2008 or later.

To download the Log Insight Windows Agent .msi file, navigate to the Administration page of the Log Insight Web user interface, in the Management section, click Agents, and click the Download Log Insight Windows agent link.