evtsys.cfg is not clear

[GoogleCodeExporter]

Please clarify the note: what does Security-Auditing:* do? Does it add or 
remove it from the log? In the doc, you say that it will remove it. A link to 
an online doc at the right title would be nice.

'!!!!THIS FILE IS REQUIRED FOR THE SERVICE TO FUNCTION!!!!
'
'Comments must start with an apostrophe and
'must be the only thing on that line.
'
'Do not combine comments and definitions on the same line!
'
'Format is as follows - EventSource:EventID
'Use * as a wildcard to ignore all ID's from a given source
'E.g. Security-Auditing:*
'
'In Vista/2k8 and upwards remove the 'Microsoft-Windows-' prefix
'**********************:**************************

Original issue reported on code.google.com by malar...@scolab.com on 21 Mar 2012 at 2:48

[GoogleCodeExporter]

It can do either, depending on the setting of the IncludeOnly flag. Hopefully 
the doc outlines this clearly enough. If there is something you think I should 
clarify please let me know and I can change it.

Original comment by sherwin....@gmail.com on 16 Aug 2012 at 2:06

• Added labels: Priority-Low, Type-Review
• Removed labels: Priority-Medium, Type-Defect

[GoogleCodeExporter]

Added link to online docs in the default config file.

Original comment by sherwin....@gmail.com on 16 Oct 2012 at 2:25

• Changed state: Fixed

[GoogleCodeExporter]

Fixed, awaiting build and test.

Original comment by sherwin....@gmail.com on 16 Oct 2012 at 4:40