Overview
When upgrading from ESM2011 and importing the configuration, ESM2012 does not associate any processing rules to any custom event source group.
Environment
EventsManager 2012 SR1 build 20120213
Resolution
To fix the issue, apply the following workaround:
- Open the properties of a non-default event source group.
- Navigate to the corresponding tab (e.g. Windows, syslog, etc.)
- You might see that Process the logs with the rules selected below before archiving is enabled, but none of the processing rule folders are enabled.
- Enable the processing rules as needed.