Admin Console | Administration | Agents | Agent Status | highlight Windows_System AgentName | Edit Properties | Modify properties for this agent - or All Windows_System agents |
From here you can:
- turn entire Windows Event Log types (Application, System, Security, ect.) on/off being montiored = "Event Logs to Monitor"
- filter in/out specific events that the agent will detect and alert/ignore on = "Event Log Filter"
click Edit on "Event Log Filter" | Add Row | choose 'Exclude' | filter down using the fields which event you want to ignore - the easiest way to do this is by choosing all asterisks except for EvenID field - if you have the specific EventID (look in Windows Event Log for specific EventID).
