Custom Views In Event Viewer

Launch Event Manager: Start -> Run -> eventvwr.msc

In the Event Viewer Expand "Windows Logs" section:

From the logs select the particular log type you want to filter, for this example we'll use the Security log. You will then right-click on the log type you want to filter:

To filter events based on the date when they occurred, select the time period from the Logged drop-down list. Note: You can also choose Custom range and specify the earliest date and time from which you want events and the latest date and time from which you want events.

Now select the check boxes next to the event levels that you want the filter to display. For this example we'll use

Select the check boxes next to the event sources that you want your filter to display in the Event source drop-down list

In Event IDs, type the event IDs that you want your filter to display, for example, type 6005.

Note: If you want to filter based on separate multiple event IDs, you can enter them separated by commas. If you want to include a range of IDs, for example 10000 through 10010, you can type 10000-10010. If you want the filter to display events with all IDs except certain ones, type the IDs of those exceptions, preceded by a minus sign. For instance, to include all Event IDs between 4624 and 4634 except for 4630, type 4624-4634,-4630.

In Task Category, select the check boxes next to the task categories in the drop-down list that you want your filter to display.

In User, enter the name of the user accounts you want your filter to display. To enter multiple user accounts, separate them with a comma (,). In Computer(s), enter the name of computers that you want the filter to display. This field refers to the source computer of the event. Enter multiple computers by separating them with a comma (,). Click OK to apply the filter.

You will now see your filtered results.