Thanks a lot for your findings, just want to bit clear on your suggestion.
So we need to specify the opilas source in log tab along with Application, system and security an select that in the log, please confirm as we are already using opilas4 in the source field.
Earlier we were using ( * ) in the log, i believe that would capture all the events irrespective of the type of the log, so it wont work in this case?
Please elaborate little bit so that i can make the required changes and inform the team that what was reason of this alerting issue.
Thank you very much again for your time to having a look in this issue.
Regards,
Manish Sharma