Currently the logger start/stop events for shell and app usage logging is reported in their group. This causes the app usage start/stop events to get hashed by the allowlist since they do not have the app usage fields. Also, this is really a system event not an event within the logger.
Currently the logger start/stop events for shell and app usage logging is reported in their group. This causes the app usage start/stop events to get hashed by the allowlist since they do not have the app usage fields. Also, this is really a system event not an event within the logger.