Good day fellow THWACKers.
I upgraded to SAM 6.2.4 a few weeks ago. Everything went well with the upgrade which is par for the course (Kudos to the dev team for that). Here's my current issue. I have an application monitor with several Windows Event Log Monitor components. Each component is configured to look for a specific eventID e.g. 4625, 4648,4722,4723.4724..... that's written to the Security Log. Each component monitor is also configured with "Include events: With Keywords Below" e.g. User1, User2, User3....
The issue I'm experiencing since the upgrade is that the "With Keywords Below" portion does not seen to be working anymore. Event alerts are triggering for any account that causes one of the specified eventIDs to be written to the security log. As I stated above this was not the case prior to the upgrade to 6.2.4. Has anyone seen this issue? Does anyone know how to fix this?
Thanks in advance for any assistance
