Events View Properties: Criteria

Criteria

This tab has two input areas, one for selecting events and one for specifying the corresponding descriptive parameters that are used to qualify the event. In the Which events do you want to view?list, select an event by clicking the check box beside the event that you want. When you select an event, a corresponding hyperlink is displayed in the View description (click the underlined value to edit)input area. Click the hyperlink to open a dialog box, and then provide the required information. The following table lists the available events and describes the associated information you are prompted to provide.

Event	Required view description information
from specified source	Click the link to open the Sourcedialog box. Type a complete text string or use wildcards to identify the alert source.
of specified type	Click the link to open the Typedialog box. Select the appropriate check box to identify the type of event. Choose from the following options: Audit Success Audit Failure Information Warning Error Success
with event id of a specified number	Click the link to open the Event IDdialog box. Type the ID numbers, separated by semicolons.
generated in a specific time period	Click the link to open the Date and Time Loggeddialog box to specify a time range or a time interval. The default option is In the lasttime interval, which takes the format of time value, time measurement. Type an integer to specify the time value, and click the arrow to select one of the following time measurements: days hours minutes seconds The other option is Within the time range. When you select this option, you must select at least one Afteror Beforetime range. Use the appropriate list to select the date for each.
from specified user	Click the link to open the User Namedialog box. Type a complete text string or use wildcards to identify the user.
with specified text in alert description	Click the link to open the Descriptiondialog box. Type a complete text string or use wildcards to identify the alert description.
raised by specified computer	Click the link to open the Computer Namedialog box. Type a complete text string or use wildcards to provide the Domainand Computerinformation.
in specified category	Click the link to open the Categorydialog box. Type a complete text string or use wildcards to identify the category.
from event providers of specified type	Click the link to open the Provider Typedialog box. Select the check box beside each provider that you want to identify. The available choices are: Performance Monitoring Generic Provider Timed Event Application Log Event Log WMI Events WMI Numeric Provider
from event providers with specified name	Click the link to open the Provider Namedialog box. Type a complete text string or use wildcards to search for the provider name.
that generated alerts	No action, all events that generated alerts are displayed.
that are consolidated events	No action, all events that are consolidated events are displayed.
collected by a specified agent	Click the link to open the Namedialog box. Type a complete text string or use wildcards to provide the Domainand Computerinformation.
with specified GUID	Click the link to open the Alert GUIDdialog box. Type the GUID that you want to search for.
raised by computers in a specified group	Click the link to open the Computer Groupdialog box. Type a complete text string or use wildcards to search for the computer group name.