Chat now with support
Chat with Support

On Demand Audit Current - User Guide

Introducing On Demand Audit Configuring On Demand Audit Change Auditor Integration Working with On Demand Audit Appendix A: Working with Filters Documentation Roadmap

Creating a custom search

Custom searches allow you to locate and report on the data that is of interest to you. The associated search preview updates as you construct a search to ensure you are getting the desired results. For options, see Customizing the columns displayed in a search.

To create a search

  1. Under the Searches tab, click New Search.
  2. Enter a name for the search.
  3. Click Add to enter the required search criteria.
  4. Select as many filters as required. Search terms are highlighted in the preview (and search results and event details) to allows you to quickly scan for matches.
  5. Click Edit Columns to arrange, add, and remove the columns displayed in the search. See Customizing the columns displayed in a search.
  6. Click Save.By default, the new search will be created in the category you have selected when clicking New Search. If required select a different category.
  7. If required, click Alert, select the required alert plan (or create a new alert plan) to notify the required individuals , click Save. See Working with alerts and alert plans

Available filters

The available string operators include:

  • equals
  • does not equal
  • contains
  • does not contain
  • in
  • not in
  • starts with
  • does not start with
  • ends with
  • does not end

The available integer operators for sign-in events:

  • equals_number
  • does_not_equal_number
  • greater_than
  • greater_than_or_equals
  • less_than
  • less_than_or_equals
  • between_number

The available date and time operators include:

  • during last number of days or hours (By default, this is set to the last 7 days for all new searches.)
  • between
  • before
  • after

Copying an existing search

Copying an existing search allows you to take advantage of existing settings and modify as required.

  1. Under the Searches tab, select the search.
  2. Click the copy icon. The search is created with "Copy" appended to its name.
  3. Enter a new name and change the category, if required, by selecting a new category from the drop don list.
  4. Click Copy.

The new search is now available to edit as required.

Exporting a search

NOTE:

  • 50 000 is the maximum number of results that can be exported at once. You will need to refine the search before exporting if the results exceed this number.
  • The maximum download size is 250 MB. If this size is reached, only complete results will be included, the rest will be truncated. For searches with a large number of results, the ZIP option should be used.

To export a search

  1. Select the Searches tab.
  2. Locate the required search in the list of categories.
  3. Run the search.
  4. From the Export button, select to export to a CSV or CSV as ZIP file. The location for the file is determined by your browser settings.

Creating a search from an existing search

Creating a search based on an existing search allows you to add granularity by adjusting the filters, category, and columns to suit your specific needs.

To create a new search based on an existing custom or built in search

  1. Under the Searches tab, select the search.
  2. Click the pencil icon to modify the search.
  3. Remove, add, edit search criteria as required. Search terms are highlighted in the preview (and search results and event details) to allows you to quickly scan for matches.
  4. If required, click Edit Columns to rearrange, add, and remove columns. See Customizing the columns displayed in a search.
  5. Select Save As.
  6. Edit the search name and select the category.
  7. Click Save.
  8. If required, click Alert, select the required alert plan (or create a new alert plan) to notify the required individuals , click Save. See Working with alerts and alert plans
Related Documents