> ## Documentation Index
> Fetch the complete documentation index at: https://docs.honeycomb.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Windows Events

<Badge className="hny-badge-enterprise-addon" stroke>Ent+</Badge>

<Note>
  This feature is available as an add-on for the [Honeycomb Enterprise plan](https://www.honeycomb.io/pricing/).
  Please contact your Honeycomb account team for details.
</Note>

| Platform | Metrics | Logs | Traces |
| -------- | ------- | ---- | ------ |
| Windows  |         | ✓    |        |

#### Prerequisites for Remote Configuration

##### Supported Versions

* Windows Vista or later

##### Minimum Setup Requirements

* **User Permissions:**
  * The user must be a member of the `Event Log Readers` group.
  * The user must have DCOM and WMI permissions for remote access.
* **Firewall Configuration:**
  * Ensure the firewall rules allow the necessary ports: TCP 135, 445, and dynamic RPC ports (49152-65535).
* **Windows Firewall Exception:**
  * Enable the "Remote Event Log Management" exception on the remote machine.

#### Configuration Table

##### Windows Event Log Receiver

| Parameter              | Type    | Default | Description                           |
| ---------------------- | ------- | ------- | ------------------------------------- |
| system\_event\_input   | bool    | true    | Enable the System event channel.      |
| app\_event\_input      | bool    | true    | Enable the Application event channel. |
| security\_event\_input | bool    | true    | Enable the Security event channel.    |
| custom\_channels       | strings |         | Custom channels to read events from.  |

##### Remote Configuration Options

| Parameter       | Type   | Default | Description                                     |
| --------------- | ------ | ------- | ----------------------------------------------- |
| remote.server   | string |         | The server to connect to for remote event logs. |
| remote.username | string |         | The username to authenticate with the server.   |
| remote.password | string |         | The password to authenticate with the server.   |
| remote.domain   | string |         | The domain of the server (optional).            |