11 years ago
Eventsource Conditionals
I\'d like to see an option to allow for the control of conditional statements of log event source filters. The manner in which it currently works each of the filters are AND statements. I was trying to create a log that included both EVENT ID OR EVENT SOURCE and this required me to create two separate event sources.