Change Auditor not sending AD security events


I have a forest with 2 DCs and both DCs have the agent installed. The agents are active and i can see in the overview some events from subsystem Change Auditor, service and active directory but when i am disabling/enabling an account for example the event is not picked up by the agent. If i search in event viewer i can see the events.

I checked the logs folder and the logs for the AD Plug In but i dont see any strange error there.

What is preventing the agent to pick-up the events from the DCs security logs?