Visit the Known Issues dashboard if you are experiencing issues on RSA Link
I've heard much discussion regarding this topic. For logging Windows events, which service is better, native logging or SNARE? Thoughts?
Depends on your IT policy if it allows you to install and maintain open source like SNARE on your servers. Agentless service is pull based and hence loss-less unlike UDP.
Soon you will have another option as well as we will be releasing support for Microsoft Audit Collection Services (ACS),
