Enter the filter name and select an event log package to assign this filter to. We will assign it to a package called "RDP Logon".