audit.filter.alfresco-access.default.enabled=true audit.filter.alfresco-access.transaction.user=~System;.* audit.filter.alfresco-access.transaction.type=cm:folder;cm:content audit.filter.alfresco-access.transaction.path=/app:company_home/.* audit.filter.alfresco-access.login.user=jblogs ...
In this example, events created by any user except for the internal user System will be recorded for all event actions.