Forwarding Events Identifier
If you enable a log source to collect forwarded events using Windows event subscriptions, you can specify the event source displayed for each event. Configure the Forwarded Events Identifier in the log source that collects forwarded events.
There are 3 options for setting the Forwarded Events Identifier:
This is the default option. Forwarded events are identified by the IP address of the computer that generated the events.
Forwarded events are identified by the name of the WinCollect agent that collects them. All events collected by the Agent are grouped together with a single source identifier.
You can choose a custom identifier as the source for the events. All events collected by the Agent are grouped together with this identifier.
Custom identifiers cannot contain spaces.