Curtisi,
Thanks for the direction, I'll look more at my rules fields.
As for the connectors and log sources, I assume they are correct. I simply installed the LEM agent on the Windows machines and set switches and Linux machines to send syslog messages on standard UDP 514.