Why would you prefer agentless approach? First of all is performance and second is seamless integration. No one likes installing new Agent. There is always this discussion if it is secure enough, fast enough and does not consume too much performance to run. If machine is highly utilized then agent also requires more performance to send more information. Complicated ? No, if You use agentless Windows Event Log subscription. Our Event Collector is free of listed problems: there is not agent, subscription is native for Windows and all communication is encrypted.