Hello,
Is it possible to use a wildcard in an Event Log Rule's Source field? For example...
Named instances of SQL Server have their own Source name, so if a Computer has 3 instances of SQL Server on it - a default one and two named Inst1 and Inst2 then the Application log will have events from Sources MSSQLSERVER, MSSQL$Inst1 and MSSQL$Inst2.
It would be really useful to be able to create a single Event Log Rule with the source as something like MSSQL% otherwise it will mean having to manage creating dozens of identical rules and painfully associate them with the correct Computers.
Many thanks,
Adrian