Which events should we log? June 20, 2023 05:01 Updated See Configure Windows Event Logging for a list of event types to capture and forward to your WEC server. Related articles Collection How are logs/events collected at the WEC server exported to the AARNet SIEM? Can AARNet provide guidance on the sizing of the WEC server? What happens to the events collected in the WEC server once they have been exported to the AARNet SIEM? Is there a way to determine the size of the disk based on the number of events seen in our environment?