I searched for discussion on configuring events, but came up null, but I'm assuming it's a fairly common question. I would like to configure the TCPTrafficAudit Event to exclude anything with "ProviderSID: Microsoft-Windows-Security-Auditing 5156". Is it possible to configure events?
↧