If I create an event set that for example filters to only file access control denied, only in the music download prevention policy and I choose view I see just that, all denied file access control events from the music download prevention policy.
I name this event set "Denied Music Downloads"
sweet......but.....
If I then try to run a report based on that event set the report will return all file access control denied events regardless of which poilicy the event came from. Is this a feature? Bug? Version specific? Can someone test this on their setup for me?
It seems that the report will only filter on the event code which in my case is 77. It never gets to the "only in the music download prevention policy" portion of the set.