Need Audit Status of a single subcategory

Hello All,
I got the status of subcategories of detailed tracking category with the analysis

(name of it, (if (audit failure of it and audit success of it) then (“Success, Failure”) else (if (audit failure of it) then (“Failure”) else (if (audit success of it) then (“Success”) else (“No Auditing”)))) of system policy of it) of subcategories of detailed tracking category of audit policy

But i need the status of a single subcategory. For example in Detailed Tracking Category I need the status of only Process Creation Subcategory.

Please help on this analysis.

Thanks in Advance.

You’re already retrieving the name property of your subcategory, so include that in a whose() filter…

...) of subcategories whose (name of it = "whatever") of detailed tracking...

1 Like

Thank you very much Jason.