In a nutshell I have a security.evtx file from a computer which I need to examine and find any remote desktop sessions referenced.

I can see how to set up custom reports to look for the event ID of interest, however when it comes to the date range it seems limited to only the last month.

The log I'm examining contains data from 2005 to 2011. The preset reports are working as expected but I can't seem to figure out to get a custom report to search for different events happening.

Thanks for any help and advice.