Forwarding Events Identifier

If you enable a log source to collect forwarded events using Windows event subscriptions, you can specify the event source displayed for each event. Configure the Forwarded Events Identifier in the log source that collects forwarded events.

There are 3 options for setting the Forwarded Events Identifier:

Source

This is the default option. Forwarded events are identified by the IP address of the computer that generated the events.

WEC

Forwarded events are identified by the name of the WinCollect agent that collects them. All events collected by the Agent are grouped together with a single source identifier.

Other

You can choose a custom identifier as the source for the events. All events collected by the Agent are grouped together with this identifier.