Luiz, I was having the same issue. We use log forwarder on Server 2012 R2 and 2008 R2 with no issues, but when I spun up a 2016 VM I couldn't get the logs to go through to the Kiwi server. Downloaded Microsoft's Portqry utility and using that to test the UDP port generated events in the log, but log forwarder would not. Final solution was to create multiple subscriptions to the logs; one subscription per log (i.e. One for the Application log, one for the System Log, and One for the Security log.) Hope this helps you are someone else!
↧