Search Archived Events

'Archive Search' is an efficient way to track specific events from the archive files. Unlike the 'Restore Archived Events'option which loads the file into the DB, the archive files here will be indexed and can hence be searched, to track any specific event faster. This feature also enables you to search from across all log categories.

How to perform Archive Search

Steps:

1. Click on 'Admin' Tab → 'Search Archived Events'.
2. Click on 'Index Files for Search', select time frame and log category as per your requirement.
3. Select the desired files (max 50 files per category) and click on 'Index' icon under the actions column.
4. When a file is scheduled for indexing, the status will be updated in the status bar of the same link.
5. Once a file is indexed, it can be viewed as reports through the left hand page links available on the same page (Unlike in restore archive events where once restored, reports can be viewed under the 'Reports' tab).
6. Use the search bar in each report to precisely track any specific event.

Archive Global Search

This link allows you to search a query, across all log categories. When a query is searched, first a summary of the query result for all log categories will be displayed, this can be further drilled down to view the actual report.

Search Box

Simple Search

Steps:

1. Select the search field and operator from the left side drop down box (Hover over the left side box to open the drop down).

   

2. Enter the search text in the search box and click on the green search icon.

   

   Reports relevant to the search will be displayed below.

Advance Search

Steps:

1. For multiple query search, click on the 'AND/OR' button once you type a search text. This will open an advance search panel.

   

2. Type the search text in the below search box and click on AND/OR button to append it to the above displayed query.

   

   

3. For grouping queries, drag and place the brackets wherever required.

   

   

4. To delete any query, hover over the query to display the delete button.

   

5. To change the operator, click on the operator to toggle between operators.
6. Once the query is ready, click the search button to fetch the reports for the query.