I hope someone could help me
I want to collect ALL events of level Critical, Error and Warning + from level Information JUST events id 1074, 6005, 6006, 6008. (Due to monitoring restart/shutdown of servers).
How to configure it?
I tried this, but it did not work :
- name: System
level: critical, error, warning
event_id: 1074, 6005, 6006, 6008
I received only Information events id 1074, 6005, 6006, 6008 but NO events of Critical, Error and Warning level