Not. Select this option to filter the conditions that match the string.
Parameter. Select a Windows Event Log parameter to match on.
Category. Subcategory for this event. This subcategory is source-specific.
CategoryString. Translation of the subcategory. The translation is source-specific.
Computer. The computer that the event took place on.
Event ID. Identifier of the event. This is specific to the source that generated the event log entry, and is used, together with Source, to uniquely identify a Windows NT event type.
Event Type. Type of event.
Value and Meaning of the Event Type:
Error
Warning
Information
Security audit success
Security audit failure
Logfile. Name of Windows NT event log file.
Description. Use this parameter to give a brief description of the logged event.
Source. Name of the source (application, service, driver, subsystem) that generated the entry. It is used, together with EventIdentifier to uniquely identify an Windows NT event type.
Type. Type of event. This is an enumerated string. It is preferable to use the EventType property rather than the Type property, because Type is a string. Strings are localized and using Type will not allow for matching on non-English operating systems.
User. User name of the logged-on user when the event occurred. If the user name cannot be determined, this will be NULL.
Operator. Select the operator that links the parameter to the value.
=, >, <, > =, < =, ! =
Value. Enter a value for the selected parameter.
And/Or. You may select and/or to add another condition to the string.