The SQL Server Event Source tab of the Edit Event Filter wizard allows you to change which user (SQL Server login) or application is initializing the SQL Server event you want to filter from your audit data.
Select the user or application to filter from your audit data
Allows you to select the specific software application, computer, or SQL Server login you want to filter from your audit data. You can also filter privileged user events.
When the Collection Server processes an audited event that was initiated by the specified application, computer, or user, the filter is run to see whether the identified event matches the other filter criteria.
Edit filter details
Allows you to change your specified criteria at any time as you edit your filter. As you specify criteria using the Edit Event Filter wizard, the filter details change to reflect these new settings. To edit previously set criteria, click the corresponding setting.