System Events data is accessed via company view > metrics. Currently you can filter start data and end date.

Scenario: I want to see only events titled “a user account was created”, or see all alerts for a specific hostname.

Not sure if best way to implement this would be text field, or a dropdown to filter by the various categories of events.

Ability to export to CSV would be good too.