Create a Custom View
Applies To: Windows Server 2008, Windows Vista
You can create a filter that includes events from multiple event logs that satisfy specified criteria. You can then name and save that filter as a custom view. To apply the filter associated with a saved custom view, you navigate to the custom view in the console tree and click on its name.
To create a custom view
Start Event Viewer.
On the Action menu, click Create Custom View.
To filter events based upon when they occurred, select the corresponding time period from the Logged drop-down list.
Note
If none of the options are acceptable, choose Custom range. In the Custom range dialog box, specify the earliest date and time from which you want events and the latest date and time from which you want events. Click OK.
In Event level, select the check boxes next to the event levels that you want included in the custom view.
You can either specify the event logs or the event sources of the events that will appear in the custom view.
To specify the event logs: Select the Event Log option and, in the Event log drop-down list, select the check boxes next to the event logs from which you want to include events.
To specify the event sources: Select the Event Source option and, in the Event source drop-down list, select the check boxes next to the event sources in the drop-down list that you want to include in the custom view.
In Event IDs, type the event IDs that you want your custom view to display. Separate multiple event IDs by commas. If you want to include a range of IDs, say 4624 through 4634 inclusive, type 4624-4634. If you want your filter to display events with all IDs except certain ones, type the IDs of those exceptions, preceded by a minus sign. For example, to include all IDs between 4624 and 4634 except for 4630, type 4624-4634,-4630.
In Task Category, select the check boxes next to the task categories in the drop-down list that you want included in the custom view.
In Keywords, select the check boxes next to the keywords in the drop-down list that you want included in the custom view.
In User, enter the name of the user accounts you want to display. Enter multiple users by separating them with a comma (,).
In Computer(s), enter the name of the computers that you want your custom view to display. Enter multiple computers by separating them with a comma (,).
Click OK.
On the Save Filter to Custom View dialog box, in Name, type a name for the custom view.
In Description, type an optional description of the custom view.
Select the folder in which you want to store the custom view.
Note
Custom views can be stored in the Custom Views folder or any subfolder of the Custom Views folder. You can create new subfolders in the Custom Views folder by selecting it and clicking New Folder.
You can make the Custom View accessible to anyone using the computer or only to someone logged on to your current account.
To save the custom view and make it accessible to anyone using the computer: Ensure the All Users check box is selected and click OK.
To save the custom view and make it accessible only to someone logged on to your current account: Ensure that the All Users check box is not selected and click OK.
Additional Considerations
- Leaving a field in the Create Custom View dialog box blank specifies that you want your filter to display entries with any value of the corresponding property.