Change Auditor cannot search/alert for specific event ids, it monitors the events (at the service hook level) not by reading event logs.
You can use the Event Reference Guide PDFs included with Documentation of Change Auditor for references on what Change Auditor can monitor.
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center