To configure a new Windows Event Log or Syslog source:
Tip: You may select multiple devices by holding the
Ctrl key when clicking device names/IP addresses.
Note: By default the Select Log Source Devices dialog only displays network devices from which WhatsUp Gold can likely receive log data. If you do not see a device you'd like to designate a log source, disable the Eligible sources only control at the top of the dialog to expand log source options across the network.
The log source(s) you've configured now appear in the main Log Data Source Setup dialog. In addition to being the launching point for configuring a new log source, this interface also allows you to edit and remove log sources as well as enable/disable log sources and apply a single ingestion filter to multiple (WinEvent) log sources using the Bulk apply ingestion filter control.
Please note the following specific to the Bulk apply ingestion filter feature:
Tip: The Bulk apply ingestion filter feature respects results returned when using the Search field at the top of the dialog. By default, the bulk filter is applied to all logs of the selected ingestion filter type. To apply a bulk ingestion filter change to a specific log name, use the Search field to identify and select the target log name prior to filter application.
You can also access this workflow directly from the Logs tab on the Device Properties interface. When viewing Device Properties for a device you'd like to configure as a log source, select the Logs tab, then proceed with the same steps described previously beginning with clicking the icon. If you configure log data collection from Device Properties, it's important to note the Add Device to Collect Logs dialog is automatically populated with the device as the potential log source; no device selection is necessary, so the group/device selector tool cannot be accessed in this scenario.