From 36ffb11950d12ee072e752fedd826f5d162ef0c8 Mon Sep 17 00:00:00 2001
From: Michael Haag <5632822+MHaggis@users.noreply.github.com>
Date: Mon, 12 Sep 2022 08:53:24 -0600
Subject: [PATCH] Update wineventlog_application.yml

---
 macros/wineventlog_application.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/macros/wineventlog_application.yml b/macros/wineventlog_application.yml
index a3a889062e..e3e98c58c7 100644
--- a/macros/wineventlog_application.yml
+++ b/macros/wineventlog_application.yml
@@ -1,4 +1,4 @@
-definition: eventtype=wineventlog_application
+definition: eventtype=wineventlog_application OR source="XmlWinEventLog:Application"
 description: customer specific splunk configurations(eg- index, source, sourcetype).
   Replace the macro definition with configurations for your Splunk Environmnent.
-name: wineventlog_application
+name: wineventlog_application
\ No newline at end of file