...
On the collector computer, type the following command on command prompt:
1. >> wecutil qc
Now create a New Subscription
2>> On the collector computer in search box, run Event Viewer as an administrator.
3 >> Click Subscriptions in the console which is situated in the left side
4 >> Start Windows Collector Service
If the Windows Event Collector service is not started, you will be prompted to confirm that you want to start it. This service must be started to create subscriptions and collect events. You must be a member of the Administrators group to start this service.
5 >> On the actions menu, in right side click on the create subscription.
6 >> In the Subscription Name box, type a name for the subscription
7 >> In the Description box, enter an optional description.
8 >> In the Destination Log, select the log file with help of dropdown where collected events are to be stored. Please make sure that the collected events are stored in the "System" log.
9 >> now click on select computers from which events are to be collected
Now put the computer name one by one
10 >> After adding a computer, you can test connectivity between it and the local computer by selecting the computer and clicking Test.
11 Click on "Advanced ">> Select "Specific User">>Enter the credentials of the admin user of the Collector system.
12 Click Select Events to display the Query Filter dialog box. Use the controls in the Query Filter dialog box to specify the criteria that events must meet to be collected.
In the "Event Level part", click on all critical, warning, verbose, error and information for all events.
Also, select the "By log" option, and then choose
>> Now click on the add domain computer
>> In object name put your computer name one by one
for the Application and Services -
1. Click on + next to Application & Services:
...
4. Check the box next to "DriverFrameworks-UserMode"
>>Then click on the advance tab
>> Select "Specific User" and then click on user name and password
>> And put the username and password with the admin privilege
13
>> Click OK on the Subscription Properties dialog box. The subscription will be added to the Subscriptions pane.
To check the status,
Right click on the Subscription name, select "runtime status". if the operation was successful, the Status of the subscription will be Active.
...