Matching Windows event viewer system logs with discovery probes and pattern stepsSummaryHow do you identify the windows logs created by the MID Server, and by discovery ?InstructionsCreate a custom filter for the user running the MID server In Windows Event Viewer, you can create a custom view selecting all events by the user you created to run the MID server. This view will only show those events by the user so will be confined to the MID Server unless you are using the user for other purposes as well. To further restrict the number of entries shown, you may use a key word such as 'Discover', which will only show entries containing that word.