I am using ELA v10 on Windows

I have a Failed Logins report that is reporting exceptions

However I want to exclude reporting of failed logins from certain usernames.

When I add an exception for each username I want to exclude, no failed logins are being reported

The logic that I have is:

Event ID = Predetermined Events

AND HOSTTYPE equals Windows

AND Username not equals User1

AND Username not equals User2

Would appreciate suggestions on how to troubleshoot

Thanks

Vaughan