So LogSources have a couple purposes:They allow you to filter out certain logs. I’m not sure the use case here since the LogSource is explicitly including logs. Maybe the point is to allow you to exclude certain logs that have sensitive data. No masking of data, just ignore the whole log. Not clear if the ignored logs are still in LMLogs or if they get dumped entirely. They allow you to add tags to logs. This is actually pretty cool. You can parse out important info from the log or add device pr...

Hi @Stuart Weenig Thank you for taking the time to share your feedback with us. We genuinely appreciate your insights into our system! In your post, you’ve rightly identified a challenge we face when it comes to mapping logs to log sources. It’s indeed a bit of a chicken-and-egg situation. Allow me to clarify the reasoning behind our approach: When a log is sent from a device to Logicmonitor and enters our processing pipeline, the question arises: how do we identify the sourc...

Has anybody noticed the flaw in LogSource logic? | Product Discussions

MoreDiscussions

Has anybody noticed the flaw in LogSource logic? | Product Discussions | LogicMonitor Community