NetWitness Platform provides several ways to collect logs from Microsoft Windows machines. Each method has advantages and disadvantages, as well as different methods of configuration.
Basically, NetWitness Platform provides the following ways to collect Windows logs:
The following table describes details for each option: use these details to help determine how you choose to collect Windows Logs in your environment.
Snare was free for a long period. After they began to charge, NXLog stepped in and now integrates very similarly with NetWitness.
For the details on how to configure and collect logs using each of these methods, please see the individual guide for that method: