I'm trying to create a "Custom View" thru eventviewer on Windows 2k8R2-SP1 to see multiple logs from multiple nodes in a cluster in one view. But it doesn't seem to accept the remote computers' names by ip or by fqdn. Is there a specific way to add the computernames here.
None of the blogs I came across discussed adding multiple computer names in a custom view.
Best Answer
The custom view will only show events that are in the event viewer, you can't filter to show remote computer events unless you have connected to the remote computer (Right Click on 'Event Viewer' Select 'Connect to another computer' and enter the remote host name in the 'Another Computer' field).
If you want a central repository for all your cluster hosts you will need to configure event subscriptions. This will allow you to collect events from multiple hosts and then use the custom filter to view more than one host at a time.