I\'d like to see an option to allow for the control of conditional statements of log event source filters. The manner in which it currently works each of the filters are AND statements. I was trying to create a log that included both EVENT ID OR EVENT SOURCE and this required me to create two separate event sources.
Thank you for your request, Keith. The only way to currently achieve this desired behavior is by making use of multiple separate eventsource.rn rnI have went ahead and put in an internal product improvement request to allow for compound/conditional Windows event filters. Please let me know if there is anything else that we can do for you.rn rnBest,rn rnJoseph Skup.rnLogicMonitor Support
AdvisorThis is part of release 54, which should be active on your account within 2 weeks.rnhttp://help.logicmonitor.com/using/event-sources/windows-event-log-monitoring/ComplexEvents
