The following Knowledge base article will allow you to filter out the 5156 event ID along with additional similar events.
1 of 1 people found this helpful
I'm not 100% sure what you mean by configuring the event, but I have a couple ideas (and you can reply and let me know if I'm totally off).
One, you can always exclude stuff in Rules and Filters by clicking the operator to switch it from "equals" to "does not equal."
You can also use Policy to filter what you do and don't see in the Console, and what triggers rules. Policy is powerful, so please be careful unchecking or checking everything. You access policy from the Manage Appliances menu, and then clicking the gear next to the LEM. You'll see a Policy option.
If you search for 5156, you'll get this:
You can uncheck those boxes to basically stop the LEM caring about that Provider SID in that Event Class.
We have some documents on using Policy to reduce Windows Platform Filtering noise: SolarWinds Knowledge Base :: Disabling Windows Filtering Platform Alerts Using Alert Distribution Policy That might serve as a guide for how to work with the policies.