The SQL Server Event Source tab of the allows you to specify which user (SQL Server login) or application is initializing the SQL Server event you want to filter from your audit data.
Select the user or application to filter from your audit data
Allows you to select the specific software application, computer, or SQL Server login you want to filter from your audit data. You can also filter privileged user events.
When the Collection Server processes an audited event that was initiated by the specified application, computer, or user, the filter is run to see whether the identified event matches the other filter criteria.
Edit filter details
Allows you to change your specified criteria at any time as you create your new filter. As you specify criteria using the New Event Filter wizard, the filter details grows to include these additional settings. To edit previously set criteria, click the corresponding setting.