The following steps shows how to exclude a specific file in a File System event search:
1) Click “New” bottom in the button-bar menu to create a new search (save it as any desired name).
2) Select the “What” tab of the search property at the bottom of the Change Auditor Client (search properties must be visible).
3) Click “Add” or the “Plus” (+) in the button bar and search for and select the desired “Event Classes”.
4) Click the down arrow beside the “Plus” or “Add” button in the button-bar of the search properties.
5) Select “Subsystem” | “FileSystem” from the Context menu.
6) Select “This Object” for the Scope, and “File” for the Type.
7) Browse for or enter the file path in the Path field, (this is a physical path on the file server don’t use UNC).
8) Click add to move the selected file path to the section below.
9) Click the "Exclude The Above Selection(s)" check box in the lower section.
10) Click "OK" then "Save" to save the report