I have the above problem but have just realised if anyone else is having it they won't find it in a search because of the title of my thread:
https://community.norton.com/en/forums/does-windows-event-viewer-record-every-process
So please don't add any comments in this - it's just a signpost.
PS If you speak Chinese or a far-eastern language, you might want to have a look at the screen-shot in that thread to see if it's clear enough for you to understand. Thanks