Our developers have created a custom Windows Event Log to log events from an In-House develop app. What would be the best way to index this custom event log?
Just add in an input stanza like this.
[WinEventLog:customname] disabled = 0 index=windows
