Coupon code copied
Server Intellect
(855) 850-HOST

Toll Free 24/7/365        (4678)

Get help from a Microsoft Certified Engineer.

Intellect Connect

Technical problem with your Windows Hosting?

Let our Microsoft Certified experts handle the problem for you.
Chat Now

Creating Custom Views In Event Viewer

Step 1

Launch Event Manager: Start -> Run -> eventvwr.msc

kb-custom-view-1

Step 2

In the Event Viewer Expand “Windows Logs” section:

kb-custom-view-2

Step 3

From the logs select the particular log type you want to filter, for this example we’ll use the Security log. You will then right-click on the log type you want to filter:

kb-custom-view-3

Step 4

To filter events based on the date when they occurred, select the time period from the Logged drop-down list. Note: You can also choose Custom range and specify the earliest date and time from which you want events and the latest date and time from which you want events.

kb-custom-view-4

Step 5

Now select the check boxes next to the event levels that you want the filter to display. For this example we’ll use

kb-custom-view-5

Step 6

Select the check boxes next to the event sources that you want your filter to display in the Event source drop-down list

kb-custom-view-6

Step 7

In Event IDs, type the event IDs that you want your filter to display, for example, type 6005.

kb-custom-view-7

Step 8

Note: If you want to filter based on separate multiple event IDs, you can enter them separated by commas. If you want to include a range of IDs, for example 10000 through 10010, you can type 10000-10010. If you want the filter to display events with all IDs except certain ones, type the IDs of those exceptions, preceded by a minus sign. For instance, to include all Event IDs between 4624 and 4634 except for 4630, type 4624-4634,-4630.

In Task Category, select the check boxes next to the task categories in the drop-down list that you want your filter to display.

In User, enter the name of the user accounts you want your filter to display. To enter multiple user accounts, separate them with a comma (,). In Computer(s), enter the name of computers that you want the filter to display. This field refers to the source computer of the event. Enter multiple computers by separating them with a comma (,). Click OK to apply the filter.

You will now see your filtered results.

Interested in letting our experts solve your IT problems for you?
Get a free, no-obligations consultation with one of our experts today!

Call us at (855) 850-HOST

Chat Now

Start Your Order

X

This form does not accept free e-mail accounts. Please enter a business e-mail to submit it.

Submit Form Cancel

Please wait...

Submitting your info. This may take less than a minute.