256 sources limit
Back to conversation about current workaround... Windows Server 2016 has more than 256 channels. Is it possible to create a second thread/instance to subscribe for the remaining channels? I can try to guess and create XML filter to exclude some unneeded for now but tomorrow MS can create more channels with some update and would be nice if it handled automatically.
We were hoping Microsoft would fix their code but it looks like this isn't happening.
You can create two im_msvistalog input instances with the available sources split between the two. On the other hand this would mean specifying the exact set of sources which is not very flexible like you said.
Work is in progress to implement a proper workaround so that im_msvistalog can handle this internally.