Store and Forward#
Once EventReporter collects an event and it matches a rule, actions can store it locally or forward it to downstream systems.
Where to configure#
Actions is the entry point for output, storage, and notification behavior.
Common storage targets#
Flat files: Write to File
Databases: Write to Database
Windows Event Log: Write to Event Log
Common forwarding targets#
Syslog: Forward Syslog
SETP: Forward via SETP
Email: Send Email
Recommended setup path#
Start with one local storage action so results are easy to inspect.
Add forwarding after filtering behaves the way you expect.
Test remote targets early so host, port, authentication, and protocol mismatches are found before production rollout.