Hi jhynds, thank you for your time to reply my question.
I have done the additional steps required as advised. But logs are still not coming in to LEM
The Connector i am using is: Microsoft Windows Failover Clustering (HyperV Cluster) logs
I have realized that the Connector for 'Microsoft-Windows-FailoverClustering/Operational' log has a different log path.
Instead of the similar log path in the properties '%SystemRoot%\System32\Winevt\Logs\Microsoft-Windows-FailoverClustering%4Operational.evtx'
it's pointed to System instead. Which is the same as the Connector for Windows System. And this is not editable.
For example, in the link Success Centerv uses AppLocker as an example.
After removing the spaces in the log properties with a new registry key created
The connector AppLocker has the similar log path as in the log properties.
Would you advise that the log path for Microsoft-Windows-FailoverClustering/Operational should be changed to the Window's System Log Path?
which is %SystemRoot%\System32\Winevt\Logs\System.evtx