Narrowing the analysis to users in an Active directory Group or OU

Content Authoring
1

(imported topic written by ajdyer200091)

I have the following analysis that checks the event log for a certain event number.

((month of it as two digits & “/” & day_of_month of it as two digits & “/” & year of it as string) of dates (local time zone) of times generated of it, (time of times (local time zone) of times generated of it), computers of it, descriptions of it) of (records of application event log) whose (event id of it = 998 and (time generated of it > (now - 90*day)))

Is there any way to narrow the analysis to certain users in Active Directory group or OU?

Thanks

Alan

2

(imported comment written by SystemAdmin)

Are you refering to: http://support.microsoft.com/kb/224157

or just any event specific event in general?

If so what are you looking to get out of AD?