Services#
Services are the configured input side of rsyslog Windows Agent. They collect or receive events and send them into the assigned ruleset.
In this manual, input is the clearest plain-language concept, while service remains the operational term for the configured rsyslog Windows Agent object.
You must define at least one input service. Without a service, the product does not collect or receive any event data.
Defaults vs. active services#
Service defaults are templates. They provide starting values for new services, but they do not collect data by themselves. Actual processing only happens in the active service instances you create under Running Services.