So just so I completely understand, all events are getting sent but you only want events that have the ID of 4625 and you are using version 2.8.1? This is happening even with "eventchannel"?
-- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
