Windows Event Collector
Contents |
General Information
None at this time
Windows 8
Default Description
This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.
Additional Information
None at this time.
Default Startup Type
| OS | WDP |
|---|---|
| Windows 8 WDP | Manual |
Service Names
Service Name (registry): Wecsvc
Display Name: Windows Event Collector
Default Path and Command Line Options
C:\Windows\system32\svchost.exe -k NetworkService
Log On As
Account: Network Service
Dependencies
Note: No dependencies are listed for any service in the WDP build I used to draft this information.
Windows 7
Default Description
This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.
Additional Information
None at this time.
Default Startup Type
| OS | SP0 |
|---|---|
| Windows 7 Starter | Manual |
| Windows 7 Home Basic | Manual |
| Windows 7 Home Premium | Manual |
| Windows 7 Professional | Manual |
| Windows 7 Ultimate | Manual |
| Windows 7 Enterprise | Manual |
Service Names
Service Name (registry): Wecsvc
Display Name: Windows Event Collector
Default Path and Command Line Options
C:\Windows\system32\svchost.exe -k NetworkService
Log On As
Account: Network Service
Dependencies
What service Windows Event Collector needs to function properly:
- HTTP (S, HB, HP, P, U, E)
- Windows Event Log (S, HB, HP, P, U, E)
What other service require Windows Event Collector to function properly:
- None (S, HB, HP, P, U, E)
Windows Vista
Default Description
This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.
Additional Information
None at this time.
Default Startup Type
| OS | SP0 | SP1 | SP2 |
|---|---|---|---|
| Vista Home Basic | Manual | Manual | Manual |
| Vista Home Premium | Manual | Manual | Manual |
| Vista Business | Manual | Manual | Manual |
| Vista Ultimate | Manual | Manual | Manual |
| Vista Enterprise | Manual | Manual | Manual |
Service Names
Service Name (registry): Wecsvc
Display Name: Windows Event Collector
Default Path and Command Line Options
C:\Windows\system32\svchost.exe -k NetworkService
Log On As
Account: Network Service
Dependencies
What service Windows Event Collector needs to function properly:
- HTTP (HB, HP, B, U)
- Windows Event Log (HB, HP, B, U)
- Windows Firewall(HB, HP, B, U)
- Base Filtering Engine(HB, HP, B, U)
- Remote Procedure Call (RPC)(HB, HP, B, U)
- DCOM Server Process Launcher (HB, HP, B, U)
- Remote Procedure Call (RPC)(HB, HP, B, U)
- Windows Firewall Authorization Driver (HB, HP, B, U)
- Base Filtering Engine(HB, HP, B, U)
What other service require Windows Event Collector to function properly:
- None (HB, HP, B, U)
Additional Reading
- WS-Management: http://en.wikipedia.org/wiki/WS-Management