lindaJust wondering how event monitoring is handled by the machine. Is it better to keep it simple and have 1 large event set assigned to all servers (including events not applicable to some servers e.g. exchange) or break them up into smaller applicable event sets and apply?
arobarI originally went the route of setting up one big event set to ignore what we didn't need to see, but I'm regretting that now