Windows logs with OPS-Agent

Every Windows Server gathers system metrics and logs within the Event Viewer. The log retention period adheres to the default settings in this environment.

Each server is equipped with OPS-Agent, which transmits Windows logs to GCP Logging. The OPS-Agent, active on all servers, accumulates standard data and logs. Logs are stored in GCP log buckets in each GCP project. *

Windows server OPS-Agent config:

C:\Program Files\Google\Cloud Operations\Ops Agent\config\config.yaml

Config includes logging receivers which collect specific data. * for example, IIS logs

By default, the Ops Agent collects Windows event logs from System, Application, and Security channels, as well as host metrics, IIS metrics, and SQL Server metrics.