Filtering audit events

You can filter events in the Audit Log by one or more criteria.

To filter application events in the Audit Log:

1. In the main window of the application web interface, open the management console tree and select the Events section.
2. Select the Audit tab.

   Event information is displayed as a table.

3. Click .

   This opens the add filter window.

4. Click Add.
5. In the fields that appear, configure the filtering criterion that you want. To do so, populate the filter fields in accordance with the following table.

   a. Select a criterion:	b. Select a logical operator:	c. Enter a value:
   GUID	= ≠	Unique global ID of the event.
   User IP address	= ≠	IP address of the computer from which the event was initiated.
   Node	= ≠	IP address and port of the node that processed the event.
   User login	= ≠	Login of the user that initiated the event.
   Account type	Local user SSO user	Account type of the KSMG user that initiated the event.
   Event type	= ≠	Select the event type: Authentication Rules Dictionaries Backup Settings
   Event	= ≠	Select the event: Authentication attempted Rule created Rule modified Rule deleted Dictionary created Dictionary modified Dictionary deleted Sending from Backup started Sent from Backup Downloading from Backup started Downloaded from Backup Deleting from Backup started Deleted from Backup Protection settings changed
   Date and time	from before	Time period when the event occurred.
   Event part	⩽ ⩾	Number of the part with information about the event.
   Result	= ≠	Event result.

6. To add another criterion, click Add.

   Filtering criteria are combined with the "AND" logical operator.

7. Click Apply.
8. Close the add filter window.

The table of events is displayed in accordance with filtering criteria.

Page top