Windows telemetry support / guide

[cveilleux]

I'm looking into logtide for a small SIEM type lab.

Linux support is well documented but I did not find any info/guide on how to monitor a windows endpoint.

Looking at the doc, it should already be possible to ingest logs from a windows machine using the OpenTelemetry support. Either the official OpenTelemetry collector or a windows build of Fluent-Bit could probably be used.

Has anybody tried it? A guide in the official documentation would be a nice addition, including a sample configuration.

[Polliog]

Hi @cveilleux thank you for noticing the gaps inside the docs

I've just added a dedicated guide for Windows endpoint monitoring: https://logtide.dev/docs/windows/

The guide covers three options:

1. OpenTelemetry Collector (recommended), native Windows Event Log support with full OTLP integration
2. Fluent Bit for Windows, lightweight alternative
3. NXLog Community Edition, enterprise-grade free option

It includes configuration examples for:

• Windows Event Logs (Security, System, Application)
• Sysmon integration for enhanced visibility
• PowerShell and Defender logs
• IIS logs
• Security monitoring with Sigma rules

All methods send logs to LogTide's OTLP endpoint (/v1/otlp/logs), so you get the same seamless integration as with Linux.

Let me know if you run into any issues or if something needs clarification