def rule(event):
    if event.deep_get("EventID", default="") in [1006, 1015, 1116, 1117]:
        return True
    return False
