Currently the only way to edit what Windows Events are collected by Log Analyzer is to edit a custom query within the advanced configuration. Would like to see this in a more user friendly format.
An article on how to do the edits manually can be found here but the process could be simpler.
How to Filter Windows Events using the Log Analyzer Agent
