Event Log Source Wildcard

Event Log Source Wildcard

Hello,

Is it possible to use a wildcard in an Event Log Rule's Source field? For example...

Named instances of SQL Server have their own Source name, so if a Computer has 3 instances of SQL Server on it - a default one and two named Inst1 and Inst2 then the Application log will have events from Sources MSSQLSERVER, MSSQL$Inst1 and MSSQL$Inst2.

It would be really useful to be able to create a single Event Log Rule with the source as something like MSSQL% otherwise it will mean having to manage creating dozens of identical rules and painfully associate them with the correct Computers.

Many thanks,

Adrian

                  New to ADSelfService Plus?