After viewing the results of a search, it might be necessary to refine the search results and add additional search criteria. For example, you might see one initiator user’s name appear several times in the search results and want to see more events from that initiator.
To filter the search results using a specific value appearing in the search results:
Identify the desired filter criteria in the search results.
Click the value (for example, target hostname test 1900) by which you want to filter the results.
HINT:This adds the value to your filter with an AND operator. To add the value to your filter with an NOT operator, press the Alt key as you click the value.
Click
.Some fields cannot be selected to refine a search this way:
EventTime
Message
Any field related to the Reporter
Any field related to the Observer
Any field related to TargetTrust
Any field with a value Unknown
For trademark and copyright information, see Legal Notices.