Would someone be able to tell me how to filter out service accounts. Also is there an audit file to tell who has logged into the eventlog analyzer?