Search the Security event logs by username

Search the Security event logs for a username - when filtering the log:

1. On the XML tab, click 'Edit query manually'.
2. Replace:
   
   <Select Path="Security">*</Select>
   
   with
   
   <Select Path="Security">* [EventData[Data[@Name='TargetUserName']='USERNAME']]</Select>
   
   where 'USERNAME' is the desired username.

Thanks, Beaming?