The Remote Windows Log Reader uses Windows Management Instrumentation (WMI) to connect to remote Windows machines and read event logs.
For this source to work the following services must be installed and started on both server and client machines:
If there is some firewall between client and server machines, RPC calls must be allowed.
On the remote server under “Control Panel\Administrative Tools\Local Security Policies”, the security option “Network access: Sharing and security model for local account” must be set to “Classic”.
In order to establish a WMI connection the remote user account must have the privileges to read the Windows event logs. The “Guest” account cannot be used. User accounts must have passwords set.