Dear Team,
We have two Archiver available one in DC & Other in DR in our environment and the logs are being forwarded from single event source to both the Archiver via decoder but due to the issue with the forwarding for few weeks the logs are sent to DC Archiver only and not the DR Archiver.
Wanted to know is there any way we can identify the logs from the DC for say full 2 weeks for that particular event source(or full logs for those two weeks if separate event source is not possible) and that can be added to the DR Archiver or any alternative.
So that as per the compliance need the logs will be available at both the end.
