> ## Documentation Index
> Fetch the complete documentation index at: https://docs.honeycomb.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Windows Events

<Badge className="hny-badge-enterprise-addon" stroke>Ent+</Badge>

<Note>
  This feature is available as an add-on for the [Honeycomb Enterprise plan](https://www.honeycomb.io/pricing/).
  Please contact your Honeycomb account team for details.
</Note>

| Platform | Metrics | Logs | Traces |
| - | - | - | - |
| Windows | | ✓ | |

#### Prerequisites for Remote Configuration

##### Supported Versions

* Windows Vista or later

##### Minimum Setup Requirements

* **User Permissions:**
  * The user must be a member of the `Event Log Readers` group.
  * The user must have DCOM and WMI permissions for remote access.
* **Firewall Configuration:**
  * Ensure the firewall rules allow the necessary ports: TCP 135, 445, and dynamic RPC ports (49152-65535).
* **Windows Firewall Exception:**
  * Enable the "Remote Event Log Management" exception on the remote machine.

#### Configuration Table

##### Windows Event Log Receiver

| Parameter | Type | Default | Description |
| - | - | - | - |
| system\_event\_input | bool | true | Enable the System event channel. |
| app\_event\_input | bool | true | Enable the Application event channel. |
| security\_event\_input | bool | true | Enable the Security event channel. |
| custom\_channels | strings | | Custom channels to read events from. |

##### Remote Configuration Options

| Parameter | Type | Default | Description |
| - | - | - | - |
| remote.server | string | | The server to connect to for remote event logs. |
| remote.username | string | | The username to authenticate with the server. |
| remote.password | string | | The password to authenticate with the server. |
| remote.domain | string | | The domain of the server (optional). |