Eventsource Conditionals
I\'d like to see an option to allow for the control of conditional statements of log event source filters. The manner in which it currently works each of the filters are AND statements. I was trying to create a log that included both EVENT ID OR EVENT SOURCE and this required me to create two separate event sources.
Keith_Madaras
Posted 12 years ago·Last reply 11 years ago
2 comments
Steve_Francis
·11 years agoThis is part of release 54, which should be active on your account within 2 weeks.rnhttp://help.logicmonitor.com/using/event-sources/windows-event-log-monitoring/ComplexEvents
Joseph_Skupniew
·12 years agoThank you for your request, Keith. The only way to currently achieve this desired behavior is by making use of multiple separate eventsource.rn rnI have went ahead and put in an internal product improvement request to allow for compound/conditional Windows event filters. Please let me know if there is anything else that we can do for you.rn rnBest,rn rnJoseph Skup.rnLogicMonitor Support