The connector in that example is for a Windows Security log, so I'm guessing the machine under your scribble might be losing the events.
Is the source message a 4612?
The connector in that example is for a Windows Security log, so I'm guessing the machine under your scribble might be losing the events.
Is the source message a 4612?