Hi,
just added severity filter option to wineventsync subagent. Now for every reader you can specify SeverityFilter parameter, which is either bit mask or severity level names separated by commas. Below are level names and their values:
Critical = 0x100
Error = 0x001
Warning = 0x002
Information = 0x004
AuditSuccess = 0x008
AuditFailure = 0x010
To accept only warning and error events:
SeverityFilter = 0x012
or
SeverityFilter = Warning,Error
This change will be included into next patch release.
Best regards,
Victor