I am confused on how to use Content filters. I am trying to exclude an event ID 10100 (google update service stopped). I want to still be notified of all other 10100 events.
I have created an EXCLUDE filter for 10100, and in the "Content Filters" section, I added a Wildcard of *Google*. This does not work. It still notifies me of every 10100 event related to Google.
So my question is: When you EXCLUDE filter something, and then add a content filter wildcard on top of that, does that make it ONLY notify you of events that have the wildcard in it, OR, does it notify you of every event EXCEPT the ones with the wildcard match?
I hope this makes sense.