InTrust 11.6.1 - Getting Started with InTrust

Include Filter in IDM

With include filter, you can view the specified range of events for the selected data sources in the specified repository.

To configure a scheduled report

1. Open the InTrust Deployment Manager.
   
2. During creating or editing a collection and after specifying the data sources, a new feature screen will appear.
   1. The "Include all events" option is checked by default, meaning it includes all events.
   2. Unchecking the "Include all events" option enables the "Include Filter" window.
3. Follow these steps to include logs based on specific ranges of Events
   1. Click Add. A pop-up will appear.
   2. Providing a 'From' value of 200 and a 'To' value of 100 will disable the 'OK' button, as 'From' must always be less than 'To'.
   3. Enter the values as required and click OK.

      Note:[From-To] specifies the range of Event IDs you want to view in the repository for the selected data sources in the Data Sources Selection Wizard from step 1. For example, setting 'From' to 4624 and 'To' to 4700 will display logs within this range.

   4. After entering the values, you can view the range values.
   5. To edit the range, click on Edit.

4. Click Next to open up the Summary Wizard.
5. Click Finish.
   In the InTrust Repository Viewer, only the required events will be collected into the specified repository.