Windows log monitoring

For windows log monitoring, have you tried using Snare and have it sent to
a Syslog server (Rsyslog)

That gives you the most flexability in filtering and such.