Services#
Services are the input side of rsyslog Windows Agent. They collect or receive events and send them into the assigned ruleset.
You must define at least one service. Without a service, the product does not collect or receive any event data.
Defaults vs. active services#
Service defaults are templates. They provide starting values for new services, but they do not collect data by themselves. Actual processing only happens in the active service instances you create under Running Services.