Configuring Windows Event Log Data Source Properties

The Event Log data source performs a search of a Windows event log for each data source. The results of the search are returned in the data package. The log file can be local or remote to the Collector. The Collector will use Windows impersonation if credentials are entered on the Connection tab of the data source.

Data Package

The data package is matched to the Windows Event Log Wizard /Test through the following:

• Server name
• Log
• Source name
• Event ID

Sample Data Packet file name:

DataPackage.EventLog_<server_name>_<log_name>_<source_name>_<event_id>.xml

Properties

Log. The event log name.

SourceName. The event log source name.

EventID. Optional event ID used by the Test.

EventType. The event type used in the Test: All, Error, Warning, and so on.

MinutesOld. The maximum age of log entries in minutes.