When you say you triggered events, did you get the popup locally on the machine?
Does your rule have the option "monitor" checked? If not, it won't send an event to EPO.
The statistics could be for administrative or incident events.
Are you filtering your view in the incident manager screen? Does your user have the appropriate rights to view the events tied to the system tree?
Sorted, it was my tags they were in a group and i did not realise that they were an and statment