...
1.1 PS C:\Users\Administrator>wecutil qc
Create a New Subscription
...
2. Now, configure Nxlog on the collector, using the steps in the article using the link below:
Nxlog Configuration for Windows AD Logs
Note: If the AD machine is configured as the collector then you need to enable audit logs only on the AD machine. If the case is otherwise(any endpoint is configured as the collector), then you need to enable audit logs on each of the computers added in the subscriptions separately.
...