Hi,
can you provide some example of what you mean?
Do you have the workstations/servers sending logs to LEM? For agentless devices you have to configure the device usually to send logs/events to LEM, and it will then identify that a new device is sending it information. LEM will then attempt to assign connectors that would be able to normalize the data for you (or you do discovery and then assign a connector yourself).