The Additional Event Filters tab of the edit Event Alert Rule wizard allows you to change when the selected event should trigger this alert rule. You can specify more than one condition.
Available actions
Select when this alert should be triggered
Allows you to select the condition under which the alert should trigger. For example, you can specify that the alert rule look for security changes performed by privileged users or only alert on events that are successful.
Edit rule details
Allows you to specify a value for the selected condition, such as true or false.
The rule details pane also allows you to change your specified alert rule criteria at any time as you edit your alert rule. As you specify criteria using the Edit Alert Rule wizard, the rule details grows to include these additional settings. To edit previously set criteria, click the corresponding setting.