After selecting a specific event from the results of a search, you can further refine your search criteria. Expand Add to Search to display the available options for refining your current search. These options are produced from the details of the selected event and may differ between event types.
The Active Directory site of the computer from which the event originated. | ||
The following procedure provides the ‘general’ steps involved in creating a custom search.
NOTE: Selecting the Private folder creates a search that only you can run and view. Selecting the Shared folder creates a search that all users can run and view. |
2 |
3 |
Click New at the top of the Searches page. |
5 |
To be notified when an event is captured as a result of this custom search, open the Alert tab to enable and define how and where to dispatch alerts when the selected search criteria is met. See Enable Alert Notifications for more information about setting up alert notifications. |
• |
• |
To save the search definition without running it, click Save from one of the Search Properties tabs. |
• |
To create a search using a different name than was initially entered, click Save As | Save As from one of the Search Properties tabs. |
• |
To save the search definition as the new default for new searches, click Save As | Save As Default from one of the Search Properties tabs. |
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. 使用条款 隐私 Cookie Preference Center