System events include starting or shutting down the computer, full event logs, and other items which impact the computer, but may not be directly related to security.
Solution
Make sure 'Audit system events' is set to your organization's security policy.