You can quickly create a new search or refine an existing search based on values within the event details pane. This allows you to delve deeper into the details found from existing searches.

To create a search based on an event detail

  1. Select the Searches tab.
  2. Locate the required search in the list of categories.
  3. To run the search, simply click it or highlight it and click the run (arrow) icon.
  4. Select the required value, click the More options icon (...), and select New Search on this value.
  5. You can select to run the search, save it, or further filter it as required.

To filter a search based on an event detail

  1. Select the Searches tab.
  2. Locate the required search in the list of categories.
  3. To run the search, simply click it or highlight it and click the run (arrow) icon.
  4. Select the required value, click the More options icon (...), and select Add filter on this value. See Filtering Searchesand Appendix - Available Audit Search Columns and Filters for details.
  5. You can select to run the search, save it, or further filter it as required.