To create an Event Query report:
Click the Analysis tab.
In the Analysis Navigator, open the Historical Events folder.
Click Historical Event Queries.
Click Analysis > Create Report or click Create Report icon.
An Event Query window will open.
Set the following:
time frame
filter
severity level
batch size (this is the number of events to view events display from oldest events to newer events)
Click Begin Searching.
To view the next batch of events, click More results icon.
Rearrange the columns by dragging and dropping them and arrange the sort order by clicking in the column heading.
When your query is complete, it is added to the list of quick queries in the Navigator.