I've created a new ignore event log set and pushed out to all machines. Question is do I need to redeploy it to all machines everytime I update it? Or should the new changes just take efffect?
If you're using Policy's then, yes. When you change the policy you'll need to "Apply" it and the policy will take it from there. If you edit an event set from a machine then that event set will only take affect on that machine. If you're using templates, stop and build it into a policy, it's much better and will allow you to be more proactive with your changes. Hope this isn't confusing.