Hi,
I have a wincollecter server which stores relevant events defined in the subscription (as per event Id) from all my domain controllers in the forwarded logs section.
I want to create a new subscription on same server (with certain netlogon events ids) and would like to fetch them from all domain controllers.
the problem is, If I set destination log as "forwarded logs" then netlogon logs are merged with other logs which are defined in other subscription and i want to keep events which are defined in new subscription separately, How do i achieve this?
Is it possible to create a new custom log section category in event viewer in order to save these logs separately