Section outline

  • Welcome to the Configuring Windows Event Forwarding course.​​​

    This course demonstrates how to configure your Microsoft Windows Server 2008 (or newer) to forward logs to the sensor using Windows Event Forwarding. You will see how to install the required certificate on your system and how the group policy can be updated to forward the events.

    After completing this course, students will be able to configure Microsoft Windows Server 2008 (or newer) to forward logs to a sensor using Windows Event Forwarding.

    This course should take approximately 4 minutes to complete.​


    Notice: These training documents are protected by the United States copyright laws and are proprietary to LevelBlue Intellectual Property. Sale, disclosure, copying, recording, reproduction, merger, translation, modification, enhancement, or use by anyone other than authorized individuals without the prior written consent of LevelBlue Intellectual Property is strictly prohibited.

    ©2024 LevelBlue Intellectual Property. LevelBlue logo, and registered trademarks and service marks of LevelBlue Intellectual Property and/or LevelBlue affiliated companies. All other marks are the property of their respective owners.


    • This video demonstrates how to configure Microsoft Windows Server 2008 (or newer) to forward logs to a sensor using Windows Event Forwarding.

  • ​If you would like a provide feedback on the material or the platform, please complete our Survey.

    If you would like a certificate for your records, please select the Download Certificate icon.​​​ The option will not become available until you have completed all modules of the training course.