Select the source in the Data Source list on the Events tab to scope to one data source. Click the Source button to select multiple sources for scoping.
A search using the default scoping (asterisk in the Source field), which includes all data sources, returns duplicate events. To search events from all sources, perform a search scoped to the Mid-tier connector.
Exclude the Mid-tier connector from scoping when searching events from specific sources.
The search scope must be limited to 25,000 events per connector. If any included data source exceeds this limit, an error message appears. Reduce the time interval so that the returned number of events is within the limit for the search to succeed.
