No solution was ever found to this?
I am in the same situation, I would like to use Windows Event Subscription configured in the GPO to forward all my events to a central server, then use the Event Log Forwarder to send the results to the kiwi syslog server.
Clik here to view.
