My bad, I did not mention that it is a licensed product. I am assuming you don't have "SLG" in the license you have? If not, I'd suggest to request an updated license. I am pretty sure it is part of the core and doesn't have additional cost.
If my reply answered your question please click on the 'Accept as Solution' button to help others find the answer. Thanks, Shoaib
Josh, try MPEvent too.. it is different than SysLog license and if I recall right user's RDP'n into the server are logged there.. I think they used to be anyway when I ran Postilion as a customer anyway.
A lot of our licensing has license codes embedded into them so you might not see "SLG" explicitly outlined in the license too if you do have it.. but don't think that is embedded by default in Postilion.. but MpEvent I think might meet your needs.. It just isn't all Windows events and has some sort of filter on it.
If my answer helped you today, please be sure to mark the resolved button to assist others.
Christopher R Souser - Payments and Infrastructure Consultant – MSci. PA, CISSP, ITIL.