How can I collect eventlogs into my Splunk?

[ford1863]

I have configured remote WMI in my Splunk to see the eventlogs on Windows servers. But when I index and search the eventlogs on remote servers, I found the CPU load of the remote server would reached to a peak in a short time. How can I do to aviod this situation, and whether there are some other ways to collect eventlogs on remote servers more efficient?

[Lowell]

There are multiple ways of collecting windows event logs.

This page may help you out:

• Considerations for deciding how to get data from Windows hosts