There is a very recently discovered issue in the current ADMP (Version 6.0.7065.0). The Event log rules in the Microsoft.Windows.Server.AD.2008.Monitoring.mp don’t generate alerts as expected.
Jimmy Harper has created an “Addendum” MP which contains overrides to disable all of these, and then recreated each rule with a fixed version. You’ll just need to import this MP into your environment and leave the original one in place.
This problem should be fixed with the next release of the ADMP.
Read more and get the MP workaround at Jimmy’s blog: