[hobbit] Windows log monitoring

For windows log monitoring, have you tried using Snare and have it sent to a Syslog server (Rsyslog)

That gives you the most flexability in filtering and such.