What type of data source are you trying to configure? Also, verify you have the correct directory where the server stores its logs.
What do you mean? It's a Windows data source. The problem is, i need to monitor a specific RDP session event that is logged in to this specific .evt file. In Security, System or Application logs not included this message.
I try local admin, same error. For test copy events file to another directory - all work fine.
Event files locked by process
You can copy, then take logs (((