Same problem here. I have ePO 4.6.6 and set up an email alert when event 1096 is generated on an client with Win 2008 R2. I generate an event 1096 by telnetting from the server via port 25 and VSE blocks it OK. The event is logged in ePO under the right client, but no email is sent.
Appreciate any help.
Please confirm the test email is successful as per the document attached.
If the VSE is blocking the port 25, exclude the process name as it is blocking, by checking from the AP log.
Generally, we have seen "Edgetransport.exe is blocking", You can exclude this process or uncheck the block option for the AP category: Antivirus standard protection and the rule: Prevent mass mailing from block.
>> Then do the mail test connection from epo console.
Menu/Configuration/Server settings/ email server.
Email Server configured.docx 165.8 K
Connection to smtp server is ok, I tested it.
Problem is not in e-mailing - it works fine.
It seems to me that agent doesn't even register such events, that's why I don't see them in "system tree-client-action-see client events".
And event "user logged on" is just an example. I see a lot of events checked in "server settings-event filtering", so the same question - where are they all? I don't see them in agent events too.
Should I configure something for agent to register such events?