Windows 2008R2 x64 Event Log monitoring

[WillemDH]

You will need to add the defaults to the nsclient.ini file (can't remember the exact command for that but please GOogle it or look in documentation of nscp...) Then you can add the part you want of the [/settings/eventlog/real-time] to the nsclient.ini located in the nscp installation folder... Everything is very nice documented. Read the link lmiltchev gave you.. I recommend using 0.4.1.102 as 0.4.2 is not yet mature enough for production servers imo..
By the way, the info I gave you is just an example. You will need to make your own nsclient.ini file with the exclusions / inclusions of event id's you need and send it to your own respective passive services....

[sreinhardt]

Thanks for the posts Willem, thats awesome info! As he stated that would go in either your nsclient.ini or the nsc.ini file depending on the version you are running.