It sounds like you've got a bit of a ghost in your machine with those missing logs! Jokes aside, one common issue could be related to the Windows Firewall settings on the client machines. Sometimes, even if everything else is configured correctly, the firewall can block outgoing event traffic. Ensure that the firewall rules allow traffic for WEF.
As for different versions of Windows clients, make sure that all client machines possess compatible Event Log Readers Group policies applied. Version discrepancies can cause unexpected behavior in how events are formatted and forwarded.
And just to lighten the mood—why don't some computers like to forward logs? They find it too "log"istical! Hope this helps and your WEF spirits (I mean scripts) get back in line soon!
