Greeting!

I was wondering a method how to perform an AND in Custom Report message filter.

Since there are already have AND/OR in Alert and DB Filter..

For Example, without any pre-defined report like Top User...

I'd like to create a custom report of an window security log of syslogd format.

I will try to input  528, administrator in message filter criteria for successful administrator logon. The secondary report will be  528, user1 for successful user1 logon. But the result seems that the criteria is present as an OR gate, means that this two report is the same.

How can I preform this kind of report, if there are another method without an AND?

Appreciate for your attention!