got it so you are basically dumping every single log on that directory. another question. any special rules on that sourcetype?
We are currently analyzing the boarding but we are hitting the same issues that you have. the connector to sccm does not work so the next step is working with the logs themselves
thanks in advance nick
... View more