Technet gives you all you need. it is pretty straight forward.
1 . Configure Computers to Forward and collect Events
http://technet.microsoft.com/en-us/library/cc748890.aspx2. Create a New Subscription
http://technet.microsoft.com/en-us/library/cc722010.aspxfor considerations see "Additional Considerations" under the first link.
Let me know if you need help.