On the Host Timeline dashboard, what built-in parameter would you modify in order to filter...

Falcon event records use event_simpleName to identify the event type, such as ProcessRollup2, DnsRequest, or FileWritten. In CrowdStrike Query Language, the field is commonly referenced as #event_simpleName. Filtering this field limits the timeline to the event classes relevant to the investigation while preserving the host and time context. The alternatives shown are not standard Falcon event-type fields: #event_Name and #event_simpleType do not represent the documented event-name field, and #event_timelineName would describe neither the raw event type nor a supported built-in filter. A responder can therefore modify #event_simpleName to focus the Host Timeline on process, network, file, registry, or other specific telemetry events without changing the underlying host selection.

================