You can choose to enable a filter condition so it is evaluated as part of the event filter, or disable it. Disabling a filter condition means that the expression is ignored when the event filter is evaluated. You might want to disable a filter condition, instead of deleting it, so you can easily restore the filter condition for later use.
To enable and disable filter conditions
In the navigation pane, select the Resource Monitor Policies, Windows node and then select the desired resource monitor policy.
Select Event Logs.
In the details pane, select the Event Filter property and click the ellipsis (
) button on the right.The Event Filter Editor appears.
In the Event Filter Editor, you can enable and disable filter conditions (you can also add, edit, delete, and duplicate them). To enable or disable a filter condition, select or clear the check box next to the desired filter condition. A check mark means the filter condition is enabled.
Save your changes.