In the Audit Trail Viewer utility, you can quickly perform a query to filter the audit events that start with specific text.

Procedure

  1. Open the Audit Trail Viewer.
  2. Select an audit parameter from the dropdown list.
  3. NOTE

    The quick query functionality is disabled if there is a non-Timestamp rule in the query builder.

  4. Perform one the following steps, depending on the selected parameter:
  5. If any parameter other than Custom was selected, enter text in the Search text box. The quicky query will filter the events for the selected parameter that start with this text.
  6. NOTE

    If the audit parameter is not changed from the default “-“ option in the dropdown and text is entered in the Search text box, then an error message will display when the query is run.

  7. If Custom was selected, then define the rules for your query in the query builder. For more information, see Create a new query.
  8. Select Run Query.
  9. The query filters for the selected parameter that starts with the entered text or filters for the custom query.