Overview

When upgrading from ESM2011 and importing the configuration, ESM2012 does not associate any processing rules to any custom event source group.

Environment

EventsManager 2012 SR1 build 20120213

Resolution

To fix the issue, apply the following workaround:

1. Open the properties of a non-default event source group.
2. Navigate to the corresponding tab (e.g. Windows, syslog, etc.)
3. You might see that Process the logs with the rules selected below before archiving is enabled, but none of the processing rule folders are enabled.
4. Enable the processing rules as needed.