Customizing WMI query in a "Collector\Microsoft_Windows_Event_Collector_4.3.30_AllWin_EN"

Hi to all,

has anyone tryed to customize the "Collector\Microsoft_Windows_Event_Collector_4.3.30_AllWin_EN"WMI query?

I need to take only a subset of Security Event-ID data from Windows Servers.
So It is possible to save bandwith and avoid to take all events you don't need and to filter them after (in the Collector or in the Agent side).

Thank you

Best Regards

Marco