Use this tab to specify event properties that you want this rule to match.
This tab contains the following options:
- from source
- Specify that the rule matches events from the specified source.
- with event ID
- Specify that the rule matches events with the specified event ID number.
- of type
- Specify that the rule matches events of the specified type, such as Success Auditor Information.
- with description
- Specify that the rule matches events with the specified text in the description field.
- Criteria description
- Displays all criteria defined for the rule. This box is read-only.
- Advanced
- Click to specify more advanced rule criteria.
Did you find this information useful? Please send your suggestions and comments about the documentation to momdocs@microsoft.com.