I have Splunk setup with the universal forwarder installed on all of my Windows machines sending the event logs to Splunk. Collecting all of the event logs with Splunk is working great. Now I was ...
Good topic, I'd like to hear some ideas on this as well. I played around with the free version of Splunk a couple years ago and really liked it. You might want to post this in Windows Technical Mojo.