[logs] Remote log access

[saudi sans]

We are using a SIM solution which has an agent which picks up windows
logs remotely.

On this agent we have to give a user-id/password of the target server
from where windows event logs have to be picked up. This
user-id/password needs admin rights on target server. The agent also
needs remote registry access on target server. It works well.

But I am not comfortable giving admin rights and remote registry
access just for pulling event logs.

>From microsoft experts on this list - what minimum permissions are to
be provided on a target windows machine for a remote software to
access its event logs?

I am aware of solutions which push out the logs from the windows to
the agent , but i am specifically interested in the pull model with
just-the-minimum privileges.