In that case, if you’re just looking for a specific few that you want e-mail alerts on, set a filter on message text and use the simple filter type. Then just add event id’s that you want alerts on like this:
“1001” “1004” “1006”
The action for that rule can just be the e-mail action. You may get some miscellaneous alerts that contain those numbers, but you can slowly filter them our or make your filter more specific like:
“576 Security” “673 Security” etc…