It has nothing to do with logwatch. These are Windows Event log checks. This is a misunderstanding. You have to finetune the windows event log like this:
