I am not sure of the proper use of the database filter in order to accomplish the following goal: filter out events with a source of Security, an Event ID of 576, and an Event Type of Success. Since the interface allows me to choose EITHER Event ID OR Event Type, it's not clear to me how I can accomplish this.
Thanks for any insights.