8.3.2 Locating Events
By default, Event Viewer displays all events that were recorded in the selected log. You can change the type
of events that appears in the log by using the Filter command in the view menu. You can also search for
specific events by using the Find command. The filter and find commands have a number of options; these
are listed in Table 8.1
TABLE 8.1: Options for Filtering and Finding Events
From and To
The date range for which to view events (Filter tab only).
The types of events to view
The software or component driver that logged the event
The type of event, such as a logon or logoff attempt or a system
An event number to identify the event. This number helps product
support representatives track events.
A computer name.
A user logon name.
The text that is in the description of the event (Find dialog box
The direction (up or down) in which to search the log (Find dialog