Every *alert* (not event) contains the src ip/hostname. Use that to distinguish which alerts come from which agent.
On Tue, Jun 21, 2011 at 9:18 AM, SystemAli <[email protected]> wrote: > Dan : > > I am willing to give you all the required information to resolve my > problem. > > All i need to know is, *How to handle events on the server from various > agents*, so that i am not confused which event belongs to which agent. > > I hope my query is much clear this time :( > > > On Tue, Jun 21, 2011 at 5:20 PM, dan (ddp) <[email protected]> wrote: > >> >> On Jun 21, 2011 7:34 AM, "SystemAli" <[email protected]> wrote: >> > >> > Then how are we suppose to handle agents ? There must be a way ...its >> bothering me too much..please clear the cloud here :( >> >> Since I seem to be missing a fundamental piece of information, and you >> aren't very forthcoming I'll begin the handholding. >> What problem are you trying to solve with this? >> > > > > -- > "Want to be a leader? Wash the Dishes When Nobody Else > Will<http://thesash.me/wash-the-dishes-when-nobody-else-will> > " >
