Filter

Filter

Reference > Connections > Windows Events View >

ViewFilter_32_256x256

The Filter page allows you to configure basic filtering or an advanced WMI query filter.

 

Basic

Event Log

Select the Event Log to retrieve the events from. You may enter a custom Event Log name as well.

 

Event Level

Whether or not to filter for a specific event level.

 

Event ID

You can include all IDs, a specific ID or a range of IDs.

 

Time Range

Query events for a specific time frame or relative time range.

Note

When you do not specify a time range in the basic filter page, make sure you limit the number of records using other query elements or using the advanced filter. Otherwise, the number of records may be very high resulting in slow performance or high memory usage.

 

Advanced

On the advanced tab, you can specify your own WQL-Where-Clause. The toolbar features helpers and a link to the WQL query documentation as well as a test button to verify if the query can be executed successfully.