Setting up a "Source computer initiated" subscription
To set up a subscription to source events:Open the Windows Control Panel.Click Administrative Tools → Event Viewer.You can start the Windows Event Viewer snap-in by executing the eventvwr.msc
command.
In the left pane, click Subscriptions.On the main menu, click Action → Create Subscription.In the window that opens, in the Subscription name box, enter a name for the subscription.
Setting up a subscription
In the Destination log list, select Forwarded Events.Under Subscription type and source computers, select Source computer initiated.Click Select Computer Groups.In the window that opens, click Add Domain Computers.In the window that opens, in the Enter the object name to select box, enter the computer name, and click Check Names.Click OK.In the Computer Groups window, click OK.In the Subscription Properties window, click Select Events.
Configuring an event filter
In the window that opens, configure an event filter, and click OK.In the Subscription Properties window, click Advanced.
Advanced subscription settings
In the window that opens, under Event Delivery Optimization, select an option according to the table below.Click OK.Click OK.The subscription is set up.Event delivery optimization optionsOption | Usage |
---|
Normal | To deliver events urgently without bandwidth control. Five events are delivered every 15 minutes |
Minimize Bandwidth | In case of limited network bandwidth. The event delivery interval is 6 hours |
Minimize Latency | For delivering critical events with minimal delay. The event delivery interval is 30 seconds |