Creating a custom filter to view audit trail data

Article:HOWTO43370  |  Created: 2011-03-06  |  Updated: 2011-03-06  |  Article URL http://www.symantec.com/docs/HOWTO43370
Article Type
How To


Environment

Subject


Creating a custom filter to view audit trail data

OpsCenter helps you to monitor the audit trails. To monitor them, select Monitor > Audit Trails. You can use predefined filters based on category and action to display the contents of the Audit trails and also create custom filters.

You can view information about predefined and custom filters.

See Creating, applying, editing, and removing custom view filters.

To create a custom filter to view audit trail data

  1. Select the Create Filter icon. The Edit Audit filter dialog box is displayed.

  2. Enter a name for the filter in the Name field.

  3. Select the column name that you want to filter from the drop-down list. The options available are Category, Action, User Name, Domain Name, Domain Type, Time Stamp, Object Name, and Master Server. Object Name is filtered based on the entity names present in the description.

    From the Operator drop-down list, select the operator =. Use != if you do not want to match a specific value.

    In the Value text box, enter or select a value. If you select Time Stamp as the column, a calendar icon appears for value. Click the calendar icon to choose the required date and click OK.

  4. Select And or Or from the drop-down list to build the filter query.

  5. To add more columns to the query, click Add and select the required column name. To remove the column that is created, select Remove.

  6. Once you are done adding the required columns to the filter, click OK. The new view filter is displayed in the filter drop-down list.

    You can view more information about applying the filter, editing the filter, and deleting the filter.

    See View filters in OpsCenter.

See What Audit Trails track

See Audit Trails report

See About OpsCenter features for Audit Trails

See About managing Audit Trails settings

See About monitoring Audit Trails


Legacy ID



v47928939_v51189657


Article URL http://www.symantec.com/docs/HOWTO43370


Terms of use for this information are found in Legal Notices