I get an error (Event ID: 114) in my Application Event Log like this one:
No Rulebase found for service ‘Syslog Server 1’ – rule base requested was ‘?G’. This service NOT started. What to do?
This is a program bug, currently addressed but not resolved yet. You get this error if you create a service (e.g. Syslog Server) and no RuleSets exist. If you now create a RuleSet and start the service, the service does not work and you get the error in your event log. Your configuration looks fine, but the service has not really associate the RuleSet.
In the configuration client, go to the service (e.g. Syslog Server), click the “Refresh” button to refresh the Rule Set to Use. Save the settings and restart the service.