It works fine in the version 3.56, but I had one problem:
On a remote server, I was checking some logs of a specific source, in my case "Networker". In the HM listbox "event source" the source was listed as NetWorker (with uppercase W). In windows eventviewer I see the source as Networker (with lowercase w). The test only works if I change W to w. It seems it's only with that source.
Is there any reason ? Can it happen with other sources ?
HM runs on 2000, the logs I'm checking are on NT4, but as I said, it's only with that source.
I think that application (Networker) used one name when registered log source in the system (you can find this name in the registry), and it uses another name when records information into log. Theoretically the same can do some other applications but they should not behave like this.