Your screenshots are not very helpful. Better show the rules used.
I am not sure what you did but if you successful forward the logwatch messages to EC with the rule “Logwatch Event Console Forwarding” then you should see it in EC.
In the EC rules you can rewrite the application in section Rewrite:
With a unique Application then you can configure the rule “Check event state in Event Console”
So you have only one Service for different log sources. I guess that´s what you want to achieve.
Should be in the docs, If not report it in the correct category here.
BR
MF