am kindly asking for some clarifications regard the sources counting in EventLog Analyzer.

First scenario

One Active Directory domain on 4 servers: is this one source (AD application) or 4 (number of servers)?

Second scenario

One SQL db with 4 instances: is this one source (SQL application) or 4 (number of instances)?

Thanks a lot!

Massi