How to setup Windows Event monitoring
Just about any time you change a property of a device in Manage Monitored devices you will get this warning. Any device that you want to be able to analyze, report or alert on needs to have the Analyze box checked. This normally happens by default as a device is discovered, so you normally don't touch it unless you want to not analyze that device.
As for your agentless collection, it could be that you are not receiving any messages due to a permissions issue. Do you have access to SCOL and the Device Configuration documentation?
OK...so, if this is all brand new for you, it is probably best to use the new Windows Eventing Service that you can get on SCOL (note: there are additional downloads that you will need to retrieve from SCOL):
However, if you really just want to use the Legacy Collector, you can take a look at this document on SCOL:
and follow the information about the Legacy Collector.
To use the Legacy Collector, you need to do a few things:
1. The Windows server needs to have the Remote Registry Service Running.
2. The Audit Policy needs to be enabled in the Local Security Policy and you have to select the auditing (Success and/or Failure).
3. Envision needs to have an account that has permission to connect and pull the Windows Event logs.
If you do not have access to SCOL...that is probably your first step now that you have taken over the responsibility for enVision. You will want to check out the documentation like the Administrators Guide and some of the Quick Start Guides.