Logon Failures not showing up but SOX report being sent out

I am evaluating the ELA4 product (build 4020) and have found a couple of issues.

1) When creating a Database Filter, if one selects the checkbox to process a specific Event ID only and enters the Event ID into the supplied text box, the Event ID is *not* saved when saving the filter. One has to edit each filter individually and re-enter the Event ID or IDs and then save the filter again.

2) During testing Account Logon Failures, I notice that the failures do not show up anywhere in the interface for Logon Failures (IDs 529, 675) yet the SOX Compliance Alert I set up is emailing me a notification for every Failure Audit on failed logon attempts.

Can you please verify each of these issues?

Thank you,
Troy
TNT Tech LLC