This is based on previous thread

HOWTO - Custom Report for "Failed to download from Group Update Provider"
https://www-secure.symantec.com/connect/forums/howto-custom-report-failed-download-group-update-provider

When running System Reports by going to SEPM (SEP 12 RU2) > Monitors > Log type: System, Log Content: Client Activity, there is no direct, simple way to specify what Event Type to display, other than limited choices from a drop-down.

What if a user wants events that are only "Failed to download from Group Update Provider", or what if user wants events that are only "Manual Location Change".

Users should have the flexibility of filtering for whatever event they need without having to export an oversized csv (which can take 15, 20 minutes), load it on their machine, and then have to manually filter the event type.