Conceptual Thing - Consume Events From Remote Machine

Question

I have to consume permanent a specific event from remote machine's eventlog. I cannot implement a pull method to receive the event (too much network traffic).

I've read about WMI temporary event subscription and WMI permanent event subscription. But permanent event subscription isn't implemented in System.Management Namespace.

Are there any other possibilities to consume permanent events from remote machine's eventlog without installing something on remote machine (programmatically!)?

Answer 1

You can implement some simple program on the remote machine that will watch the event log and "push" interesting events to the monitoring machine via SOAP service, named pipe, or some sockets-based comm package of your own design. That would probably be the easiest way, assuming you have control of the remote machine. That way, the "polling" that simply has to be done at some level happens within the bounds of one machine, and just costs a few CPU cycles and data reads instead of constant network calls.