Event Log Monitoring - Multiple Log Sources

zhollett

{Please dont tell me to install the SolarWinds Log Forwarding tool}

Hello, I am creating an application event log monitor using the APM.  Under the Match Definition section I chose "custom".  Under there is a section called Log Source.  My events come from 1 of 2 sources.  Is it possible to have 2 sources listed there, being separated by a comma or something like that or do I have to create a separate monitor for each source.

Thanks for your assistance.

Zach

aLTeReGo

The "Log to monitor" works just as you suggest. The screenshot below shows an example of this.

However the Log Source does not support multiple values separated by commas. Your options are to create two separate component monitors each defined with their respective log source, or leave the field blank/empty which will match on any log source.