Windows Server 2016 Administration Fundamentals

Central logging (6.4.7)

One of the strongest reasons behind central logging is to set up the centralized monitoring of event logs. Instead of monitoring the different event logs of each server, you can set up central logging. To do that in Windows Server 2016, you can configure servers in your infrastructure to forward messages to a centralized server. The steps are as follows:

1. On a Remote Server, open Command Prompt with elevated admin rights, enter winrm quickconfig, and press Enter.
2. Right-click the Start button and select Computer Management.
3.  Expand Local Users and Groups and click Groups.
4. Open the Administrators group and Add the Central Server.
5. On a Central Server, open Command Prompt with elevated admin rights, enter wecutil qc, ...