No agent side filtering of events. All events from the specified log are sent to server. This causes server to overload when it receives event storm fro multiple hosts.

Also there is no way to create alarms based on events because every event is an error condition and there is no recovery event being sent.