How to build a query that finds WebTrafficAudit.EventInfo events with a specific word

I am trying to build a query for any "WebTrafficAudit.EventInfo" events that were "Denied".  I can build a filter for WebTrafficAudit.EventInfo with an "=" of *Denied* and I get results.  If I send this to nDepth and execute the search it shows no results.  I want to be able to export a report on this from nDepth.

Thanks,

Craíg