Event ID monitoring

Hello Thwack Community,

I am trying to set up some event log monitoring/alerting with Kiwi and I'm running into some issues.

The plan is to setup some east filter/actions to watch for certain event ID’s and then email when they are triggered.

Currently I am testing my setup using the Log Forwarder test alerts and am filtering for “MSWinEventLog 3”

Here is a copy of my filter.

However, when I trigger the test alert from the Log Forwarder, I can see where it hits the Kiwi system, it is logged.  But no alerts are sent out, no email is generated in the queue.  Nothing.  Not sure what I am doing wrong.  But any help would be appreciated.