Windows – is the “Task category” drop down to filter a Windows event log disabled

event-logevent-viewerwindows

I've got a specific "Task category" of Windows log events I'd like to see on their own, but the option to filter by category in the "Filter Current Log" dialog is disabled/greyed out. How can I use it?

Best Answer

The "Task category" is only available to filter a log once you've already selected something for "Event sources" above that in the "Filter Current Log" dialog. Note that in every case I've checked, you can only have one "Event sources" selected, or "Task category" gets disabled again.

That said, for the category you want filter for, first figure out what the source is, select it, and then select the task category.

After some hunting, I had finally found the answer to this here and thought I'd share: https://social.technet.microsoft.com/forums/windowsserver/en-US/c5bafdd9-2e70-4ba5-ab0b-018e86adbc97/filtering-2008-r2-event-log-security