First i'm apologise for my bad english, but I will try explain my issue.
I need help with event log monitoring.
I have tried monitor a file exclusion on Windows FS, the file audition are enabled, and we want receive e-mail alerts
I'm finished de setup a monitor according this articles:
I'm trying monitor the 4663 event (File Exclusion), and not receive the .tmp exclusions according the snapshot attached.
I'd like to know if I did a wrong monitor configuration? if yes I would like know the corret way of setup.
This looks like it might work, could you provide an example screenshot of the event log you are trying to alert on?
That would be the best way to confirm your configuration.