we have set a monitor event and want to only get certain types of logins, to alert to failed attempts, Right now, if we set it, we get all the 4624, but we just want the 4624 with type 7, and disregard all others. We want to see the errors for 4624 but when I put in Logon Type: 7, just as it is from the event log I get nothing. I only want to see type 7 events how could I do that? I am trying to do the include only event logs for options which are not working.
Your support response was: Unfortunately it is not possible to configure the Pulseway event log filter to detect the Logon Type at this time, however we will add this functionality in the future release.
Can you give us feedback on when these failed log in attempts can be filtered correctly?
