Configuring the query filter
You can modify the default log filter conditions to display data that meets specific criteria. The log filter displays data that matches all of the filter conditions. Expressions are combined using the AND operator. You cannot remove the filter criteria in the default filter, but you can modify the condition and value for the filter criteria.
Prerequisites
To configure the filter
In the Forefront TMG Management console tree, click Monitoring.
In the details pane, click the Logging tab.
On the Tasks tab, click Edit Filter.
In Filter by, select one of the log fields.
In Condition and Value, specify the appropriate condition, and then click Add To List.
Repeat steps 4 and 5 to add more conditions to the filter. Then, click Start Query.
To remove an expression from the filter list, select the applicable expression in Show only entries that match these conditions, and then click Remove.