If include: will also list events based on further correlation of IP address and host name. If exclude: will list DHCP lease ...