Can anyone clarify for me where the Event Log Message Details that are pulled by the SAM Windows Event Log Monitors actually end up in the Orion database? I'm assuming these are at least temporarily stored somewhere inside the Orion DB as I still see detail displayed with EventID and messages even for a monitor that I have unmanaged - I doubt that it is querying the data live as I look at it. I'm looking at ways to provide that data to a client where the SAM monitor has already picked up the specific EventID I'm monitoring for.
Thanks in advance!
Matt