I wrote a blog post over at 4Sysops.com about how to use event forwarding to capture events from clients and then write it to SQL. I have been using this for years now and there are so many ways this can be used, Applocker – Which apps are blocked, Windows 10 projects – how do we know that our computers are healthy and so on. The use of this is endless!
It is old technology but great stuff! Check out the whole post here: https://4sysops.com/archives/windows-event-forwarding-to-a-sql-database/
I will post some simple reporting services reports later this week as well.