There are 5 views in the advanced event viewer that are hard coded and cannot be edited.
Names and the queries for the hardcoded ones are in the screenshots below if you would like to see what the prebuilt queries look like.
Was this article helpful?
YesNo