Using the Configure Windows Event Monitoring > Delete Filter menu command from the KM Commands for the Windows Events application, you can delete a filter.
From the list of Event Logs in the the Configure Windows Event Monitoring – Delete Filter dialog box, select (highlight) the Event Log that uses the filter that you want to delete and click Next. A dialog box opens that contains a list of the filters created for the selected Event Log.
Select (highlight) the filter that you want to delete and click Delete. Selecting Delete deletes the selected filter and returns you to the Filter Name list so that you can select another filter to delete, if needed.
To close the dialog box without deleting any filters, click Cancel. Selecting Cancel returns you to the Event Log list so that you can select another Event Log, if needed.