1 Reply Latest reply on Sep 14, 2018 5:00 PM by jvb

    Windows Event Log Monitoring Efficiency

    shocko

      Building an application template that monitors 100 event sin various windows event logs. I have found it outs huge load on the system its monitoring. Tracing with ETW seems to indicates that SAM is scanning the event logs looking for matching events rather than using subscriptions to these events. Is this correct? if so this is horrible design for scalabilty