I think I am not the only one who is missing negative filters - check the log excluding audit messages.