2 Replies Latest reply on Dec 26, 2013 3:10 PM by curtisi

    Configure TCPTrafficAudit Event to exclude anything with "ProviderSID: Microsoft-Windows-Security-Auditing 5156"

    coreys

      I searched for discussion on configuring events, but came up null, but I'm assuming it's a fairly common question. I would like to configure the TCPTrafficAudit Event to exclude anything with "ProviderSID: Microsoft-Windows-Security-Auditing 5156". Is it possible to configure events?