audit process tracking with custom event filter