In the Audit Trail Viewer application, you can create queries to filter the precise events that you want to view.
Procedure
- Open the Audit Trail Viewer.
- Select Show Query (on the far right of the window).
- The application displays a combination of filters as well as And and Or operators to narrow down the search result.
- Define the rules in your query as follows:
- Select And if you want results that meet multiple conditions (returns fewer results).
- Select Or if you want results that meet any one of a list of conditions (returns more results).
- Select the condition that you want to search for, such as Object Type, Time Stamp, Username, and so on.
- Select an operator.
- Select a target.
- Repeat step 3 for each rule in your query.
- To add an additional rule to the query, select
next to either the Or button or the text box. 
- (Optional) To add an additional group to the query, select and choose Add Group.
- The Audit Viewer adds a separate group where you can create additional sets of rules.
TIP
Perform step 6 to create both an And rule and an Or rule.
- Select Run Query to test your query.
NOTE
If there are errors in the query, such as an empty value, an error message reports the issue (in the upper-right corner of the window).
