Configuring data transfer from the event source server

Preliminary steps

1. On the event source server, open the Run window by pressing the key combination Win+R.
2. In the opened window, type services.msc and click OK.

   The Services window opens.

3. In the list of services, find the following services:
   • Remote Procedure Call
   • RPC Endpoint Mapper
4. Check the Status column to confirm that these services have the Running status.

Configuring the firewall on the event source server

The Windows Management Instrumentation server can receive Windows log entries if ports are open for inbound connections on the event source server.

To open ports for inbound connections:

1. On the event source server, open the Run window by pressing the key combination Win+R.
2. In the opened window, type wf.msc and click OK.

   The Windows Defender Firewall with Advanced Security window opens.

3. In the Windows Defender Firewall with Advanced Security window, go to the Inbound Rules section and in the Actions pane, click New Rule.

   This opens the New Inbound Rule Wizard.

4. In the New Inbound Rule Wizard, at the Rule Type step, select Port.
5. At the Protocols and ports step, select TCP as the protocol. In the Specific local ports field, indicate the relevant port numbers:
   • 135
   • 445
   • 49152–65535
6. At the Action step, select Allow connection (selected by default).
7. At the Profile step, clear the Private and Public check boxes.
8. At the Name step, specify a name for the new inbound connection rule and click Done.

Configuration of data transfer from the event source server is complete.