Looking over the documentation for the
Microsoft_Active-Directory-and-Windows_2011.1r3 collector and I saw the
section for the pre-defined collector parameters. Many of them are
devoted to reducing noisy events, saving you EPS and cleaning up your
environment. I would assume this is preferable to using filters?

I also assume that in order to enable these pre-defined collector
paramters, you do it via the "Connect to Event Source" feature in the
ESM, is that right?

psmcgovern's Profile: https://forums.netiq.com/member.php?userid=5730
View this thread: https://forums.netiq.com/showthread.php?t=49221