How do I filter the event log view?

Purpose

Create advanced filters to reduce the log view to specific events that you want to investigate. Using Boolean filter expressions, you can create and combine filters to narrow log events to very specific parameters.

Steps


1	Open Users and Security.
2	Select User Activity Logs from the drop-down list on the toolbar. The User Activity Logs list displays a list of user events over a specified time period (All Available, by default).
3	On the User Activity Logs list, click Add Filter and select Advanced Filter. The Advanced Filter form opens.
4	Type a filter name and description.
5	Type a Boolean filter expression in the Filter Expression field, starting with a log information attribute type, followed by a Boolean operator and an attribute value. The system suggests possible attributes, operators, and attribute values as you type, and displays error messages in red when an expression is invalid. You can combine attribute-value expressions using either AND or OR operators, but do not combine both operators in the same filter expression. For example, the following filter expression filters on the Utility Name and Action Name attributes... `'Utility Name' = 'session-manager' and 'Action Name' = 'EXPIRY'` ...and returns only log entries with the respective attribute values of session-manager and EXPIRY. Note: When using the = filter operator, attribute names and attribute values are case-sensitive.
6	Do one of the following: Click Save Filter to save the filter to the Filter menu for future use. Click Apply to apply the filter to the log immediately. The filter expression is not saved. End of steps