So I am creating a query with the intent of finding events from 2
different machines. My test query looks like this:

(pn:"CollectorNodeName") AND (shn:"server1") OR (shn:"server2")

This is only returning events from server1 and nothing from server2,
even though I have confirmed events from server2. What am I missing?


--
psmcgovern
------------------------------------------------------------------------
psmcgovern's Profile: https://forums.netiq.com/member.php?userid=5730
View this thread: https://forums.netiq.com/showthread.php?t=49021