The source of an event policy is the specific thing that is being
monitored for events. For example, the source for a logfile entry
policy is a specific log file; the source of a WMI policy is a
specific entry in the WMI database. This section of the help
explains how to specify exactly what source a particular event
policy should monitor.