I am trying to configure a policy where only the denied events are logged as there are far too many allowed events. Is there a way of doing this natively? ... View more