Event Viewer Custom Search

Computer Name

Security Logs by Computer Name

<QueryList>
  <Query Id="0" Path="Security">
    <Select Path="Security">*[EventData[Data[@Name="Workstation"] and (Data='MYCOMPUTERNAME')]]</Select>
  </Query>
</QueryList>