• If i want to exclude SYSLOGINS , not necessarily NTusernames as defined within the instance it looks like its this

    exec sp_trace_setfilter @TraceID, 11, 0, 7, N'xxxxxxx'