Event Log Explorer Custom Columns

In this example I was trying to create a custom column Logon Type 10.

This would allow me to quickly sort all Remote Desktop Logins.

To do this, select Security in the left hand column, Double click on the Event 4624 that has a Login Type of 10

Select XML view in Event Properties.
In my case I wanted A column that displayed the LogonType.
This is number 9 in the list.
Next close out of Event Properties.

In the menu bar click on View then select Custom Columns

Fill in the details as Picture below

As you cans see {PARAM[9]}will get you Logon Type10
So if you wanted a SubjectDomainName colum this would be {PARAM[3]}