You can quickly create a new search or refine an existing search based on values within the event details pane. This allows you to delve deeper into the details found from existing searches.
To create a search based on an event detail
- Select the Searches tab.
- Locate the required search in the list of categories.
- To run the search, simply click it or highlight it and click the run (arrow) icon.
- Select the required value, click the More options icon (...), and select New Search on this value.
- You can select to run the search, save it, or further filter it as required.
To filter a search based on an event detail
- Select the Searches tab.
- Locate the required search in the list of categories.
- To run the search, simply click it or highlight it and click the run (arrow) icon.
- Select the required value, click the More options icon (...), and select Add filter on this value. See Filtering Searchesand Appendix - Available Audit Search Columns and Filters for details.
- You can select to run the search, save it, or further filter it as required.