Steps to perform a search
Use the following steps to configure and perform a search:
1. In the console tree, select DeviceLock Content Security Server > Search Server > Search Page.
As a result, the details pane displays the search page.
2. On the search page, in the Search box, specify the query string to search for the desired words or expressions.
When composing a query string, one can use commands from the shortcut menu that appears upon a right-click in the Search box:
•Insert - Point to this menu item and then choose to add a logical operator, a saved query string, or a content-aware search group to the Search box:
•Adding a logical operator - Add operators such as
AND/
OR by typing them in uppercase, or by choosing an operator from the
Insert menu. For details, see
About logical operators.
•Adding a saved query - Use the
Saved Query command to add a previously saved query string. For details, see
Managing saved queries.
In the Search box, a search group is presented by its name enclosed in percent signs: %group_name%. One could add a search group by typing a percent sign followed by the group name.
3. To set search options, click Options and then do the following:
•To specify the number of search results to display per page, in the Display <number> results per page list, click any of the following options: 10, 20, 30, 50, 100. The default number of returned results is 20.
•To search only selected logs, select the check box next to each desired log under Limit results to the following logs.
By default, the following logs are selected: Audit Log; Shadow Log; Deleted Shadow Data Log.
•To search log records by date, use the options to specify the desired date range:
•From - The beginning of the date range. Possible values:
•First Record - Search records starting from the earliest one in the log. This is the default value.
•Records On - Search records logged after or on a selectable date.
•To - The end of the date range. Possible values:
•Last Record - Search records up to the latest one in the log. This is the default value.
•Records On - Search records logged before or on a selectable date.
If selecting Records On, click in the From or To field to open the calendar. In the calendar, click to select the desired date. Use the arrows < | > to change the month and double arrows << | >> to change the year.
•To search log records by sender, recipient, file type, device type, or protocol, use the options under Limit results to the following parameters:
•Sender(s) - Sender identifiers for the following protocols: IBM Notes, ICQ Messenger, IRC, Jabber, Mail.ru Agent, MAPI, Skype, SMTP, Telegram, Viber, Web Mail, WhatsApp, Zoom. The search returns the results associated with the specified sender/s.
•Recipient(s) - Recipient identifiers for the protocols IBM Notes, ICQ Messenger, IRC, Jabber, Mail.ru Agent, MAPI, Skype, SMTP, Telegram, Viber, Web Mail, WhatsApp, Zoom, as well as for the following social networks: Facebook, Google+, LiveJournal, LinkedIn, LiveInternet, Myspace, Odnoklassniki, Twitter, VKontakte. The search returns the results associated with the specified recipient/s.
•File Type(s) - A description of the desired file type/s (either full or partial), for example: E-Mail message (Var.2), Disk Image (Macintosh), Zip 1.0. The search returns the results associated with the specified file type/s.
•Source(s) - The desired device type/s or protocol/s. The search returns the results associated with the specified type/s of device or specified protocol/s.
The Sender(s), Recipient(s), and File Type(s) fields allow the use of an asterisk (*) to denote any series of characters and a question mark (?) to denote any single character, as well as the use of the logical operators AND (space) and OR (semicolon ;).
4. Click Search.