Filtering the log
Use the following steps to configure a filter for the search tasks log viewer:
1. Select DeviceLock Content Security Server > Search Server > Tasks > Log Viewer in the console tree, right-click in the details pane, and then click Filter.
2. In the dialog box that appears, use the following settings to configure a filter:
•Include - The console lists only the events that match these conditions. To set up and apply these conditions, select the Enable filter check box on the Include tab.
•Exclude - The console does not list the events that match these conditions. To set up and apply these conditions, select the Enable filter check box on the Exclude tab.
Note: The mark next to the tab name turns green if the filter on that tab is enabled. Otherwise, the mark is gray. |
•Event types - Select check boxes to filter events by type:
•Success - Task or operation completed successfully.
•Information - Certain action performed.
•Warning - A problem might occur unless action is taken.
•Error - A problem has occurred.
•Task name, Information, Server, Event ID - Include or exclude events depending upon whether event data matches the filter string specified.
For example, to filter events by task name, specify a filter string in the Task name field. To filter events with certain IDs, enter ID numbers separated by a semicolon in the Event ID field.
Note: To assist with configuring a filter, string setting fields store previous entries and suggest matches for what is being typed. Previous entries are also available on the drop-down list of options for the setting field. |
•From - Specify the beginning of the range of events to filter. Select First Record to filter events starting from the earliest one recorded in the log. Select Records On to filter events that occurred no earlier than a specific date and time.
•To - Specify the beginning of the range of events to filter. Select Last Record to filter events up to the latest one recorded in the log. Select Records On to filter events that occurred no later than a specific date and time.
3. When finished, click to OK.
When configuring a filter, consider the following:
•Filter conditions are combined by AND logic, that is, a given record matches the filter if it matches each of the filter conditions. Clear the fields that are not to be used in the filter conditions.
•Filter string fields may include wildcards, such as an asterisk (*) or a question mark (?). An asterisk represents zero or more characters; a question mark represents any single character.
•A filter string field may include multiple values separated by a semicolon (;). In this case, the values are combined by OR logic, that is, a given record matches the filter condition on a particular field if it matches at least one of the values specified in that field.
•The Clear button in the Filter dialog box provides the option to remove all the defined filter conditions and start setting up a new filter from scratch.
•The Save and Load buttons in the Filter dialog box are used to save the filter conditions to a file and to load previously saved filter conditions from a file.
Another option to narrow down the list of events is by using a quick filter:
•Select DeviceLock Content Security Server > Search Server > Tasks > Log Viewer in the console tree, right-click in the details pane, point to Quick filters, and then select one of the following options:
•Current day - Shows the events logged during the current calendar day.
•Current week - Shows the events logged during the current calendar week.
•Current month - Shows the events logged during the current calendar month.
•Current year - Shows the events logged during the current calendar year.
To cancel the quick filter that has been applied, select the same filter option again or use the Remove filter command.
A regular filter enabled by the Filter command disables quick filters, and cancels the current quick filter (if any was applied). To enable quick filters, disable the regular filter (for example, by using the Remove filter command).