Is there a way to pull both security and application events? Tried to add custom and it seems you can have it pull application events or security events. Is there a special way you need to add then in the custom connection mode? Thank you for you help.