That looks like the case looking at the connector Regex. Any ID between 4625 and 4633 (inclusive) will be categorized a MachineLogonFailure. That should be a case to Support to get the connector fixed. Can you attach an EVTX from Event Viewer of an example event?
↧