Can I filter Event Log by the "General" text?

[jsteph]

Hi all,
I see that windows Event log can be filtered, but for example, I want to see every time the "Disk Defragmenter" started. This is lumped under Event ID 7036 "Service Control Manager".

There are many thousands of 7036 events--I want to see just the ones where the defrag started and there is no apparent way to do this.

The "Keyword" filter looked promising--until I saw that it only allows a very short, rigid list of keywords approved by the Central Scrutinizer.

Can anyone help with this?
Thanks,
--Jim

 

[linney]

Can you make any use of the Auditing abilities.

Audit Application Generated

http://technet.microsoft.com/en-us/library/dd772620(WS.10).aspx

Does the Task Scheduler offer any logging options as Defrag is run as a Task more often that it is run manually?