I'm trying to blacklist the event code 4634 when user_type = computer. I'm using the below blacklist in my inputs.conf file and it doesn't seem to work. When I remove user_type="computer", it does properly filter out the event code 4634, but it doesn't work when I try the combination of the two. What am I doing wrong or is there a different way to accomplish this?
blacklist4 = EventCode="4634" user_type="computer"
