areeb

Event Centralization

Discussion created by areeb on Apr 24, 2012
Latest reply on Sep 16, 2013 by areeb
Hello, i am trying to use a method to collect events from many servers to a centralized windows server 2008 (Collector) then i use the windows Eventing service to collect the events from the collector server and the forwarded events, all this had been successfully done, then i tried to create a correlated rule that filters events using the Event computer variable (the computer that generated the events) but no alert fires. i gone to the Message Viewer and check the events i found that the Event computer is exists. why the alerts does not fires?

Outcomes