Enable Virtualization on a Single Log Source
On the main toolbar, click Deployment Manager.
Click the System Monitors tab.
Double-click the agent collecting the log source on which you want virtualization enabled.
Log Source Virtualization is supported on Windows agents and on Linux agents from System Monitor 7.5.1.8001 and later.
The System Monitor Agent Properties window appears.
In the Log Message Sources Collected by This Agent section, locate and double-click the log source that will serve as the parent.
The Log Message Source Properties dialog box appears.Click the Log Source Virtualization tab.
Select the Enable Virtualization check box.
Click Create Virtual Log Sources.
The Create Virtual Log Sources dialog box appears.From the Catch-All Log Source drop-down menu, select the virtual source that you want to use for child logs with unrecognized sources.
The parent source is the default Catch-All source. Also keep in mind that child log sources cannot be used as Catch-Alls.
From the Log Source Virtualization Template menu, select the virtualization template that you want to apply.
In the Virtual Log Sources table, select the Action check box for each child log source that you want to use.
When you are finished configuring the log sources in the Create Virtual Log Sources dialog box, click the Save button.
Click Apply, and then click OK.
Log Source Virtualization is applied to incoming logs from the parent log source.
