In the Audit Trail Viewer utility, you can create queries to filter the precise events that you want to view.
Procedure
- Open the Audit Trail Viewer.
- Select Show Query (on the far right of the window).
- The application displays a combination of filters, as well as And operators and Or operators, to narrow down the search results.
- Define the rules in your query as follows:
- Select And if you want results that meet multiple conditions (returns fewer results) or select Or if you want results that meet any one of a list of conditions (returns more results).
- Select
, then select Add Rule.
- Select the condition that you want to search for, such as Object Type, Timestamp, Username, and so on.
- Select an operator.
- Select or enter a target.
- (Optional) To add additional rules, select
next to either the Or button or the text box.
- (Optional) To add an additional group to the query, select
and choose Add Group.
- The Audit Trail Viewer adds a separate group to the query where you can create additional sets of rules.
TIP
Add a group to the query to create both an And rule and an Or rule.
- Select Run Query to test your query.
NOTE
If there are errors in the query, such as an empty value, an error message reports the issue (in the upper-right corner of the window).