Adding Additional Windows Facility to Winrm

[JoeGumke]

In the following document, on Determine the Channel Name and Add It to a Windows Event Source, when adding a specific Channel, does the winrm only pick up the configured channel added? Or does it continue to pick up the default , security/system/application logs?

Windows Collection: Step 1. Configure Event Sources in SA 

[SaketBajoria]

Yes, only whats configured. It doesn't pickup others by default.

[JoeGumke]

thanks saket. by Default the winrm configuration should grab windows security/system/application events correct?

[SaketBajoria]

Yes, by default, if nothing is provided, it will grab Security/System and Application, but if you add anything there, only that is taken as Channel filters.