Winlogbeat enables the Windows Event Collector (WEC) server to forward Windows Event logs to the AARNet SOC.