You can refine your search for the report data by using search expressions. To perform a keyword search in a specified column, you need to use the internal name of the column instead of the column display name. For example, <internal column name>:<search term or expression>. For a list of internal column names and string examples, see the tables below.
Table 7: Unpacked Objects screen
| Column display name | Column internal name | To search for | Query example |
|---|---|---|---|
| Name | displayName | An object by object name | displayName:SamJones |
| Type | objectType | An object by object type | objectType:user |
| Backup Date | backupDate | An object by the specified backup date/time | backupDate:[2017-06-27] |
| Directory | tenant | An object by directory name | tenant:demo365 |
| Principal Name | userPrincipalName | An object by principal name | userPrincipalName:Sam.Jones@mycompany.com |
| An object by mail address | mail:Sam.Jones@mycompany.com | ||
| City | city | An object by city | city:London |
| Department | department | An object by department | department:Sales |
| Job Title | jobTitle | An object by job title | jobTitle:manager |
| Description | description | An object using keywords in the object descriptions | description:Sales |
| User Type | userType | An object by user type | userType:new |
| Telephone Number | telephoneNumber | An object by telephone number | telephoneNumber:44658 |
Table 8: Differences screen
| Column display name | Internal column name | To search for | Query example |
|---|---|---|---|
| Name | objectName | Changes related to a specified object name | objectName:SamThomas* |
| Change | changeType | Objects by change type | changeType:"Object hard deleted" |
| Object Type | objectType | Objects by object type | objectType:User |
| Attribute | changedAttribute | Changes related to a specific attribute | changedAttribute:link |
| Difference | oldValue | Search by old attribute value (value before the change) | oldValue:User1@mycompany.com |
| Difference | newValue | Search by new attribute value (value after the change) | newValue:User1@gmail.com |
| Backup time | backupDate | Search by the specified backup date/time | backupDate:[2017-06-27] |
Table 9: Events screen
| Column display name | Internal column name | To search for | Query example |
|---|---|---|---|
| Time | timestamp | Specified timestamp | timestamp:NormanThomas* |
| Description | message | Keywords in event descriptions | message:"Object attributes were restored" |
| Object Name | object.name | Objects by an object name | object.name:User |
| Task Name | task.name | Specified task | task.name:"Restore objects" |
Table 10: Tasks screen
| Column display name | Column internal name | To search for | Query example |
|---|---|---|---|
| Title | name | A task by task name | name:"restore objects" |
| State | status | A task by task status | status:completed |
| Type | type | A task by task type | type:restore |
| Modified | modified | A task by the date when the task was modified | modified:[2017-06-26] |
| Created | created | A task by the date when the task was created | created:[2017-06-27] |
| Operation | lastResultDescription | Keywords in the operation description | lastResultDescription:unpack* |
