Perform an enhanced event log search

Search the logs on Trellix Enterprise Security Manager - Enterprise Log Manager devices for information that you define.

From the navigation menu , select ELM Search.
If there is more than one Trellix Enterprise Security Manager - Enterprise Log Manager device on the system, select the devices to search from the drop-down list next to the text field.
Type a normal text search or regular expression in the text field.
If you want a time frame other than Current Day, select it on the drop-down list.
On the system navigation tree, select the devices that you want to search.
(Optional) Refine your search with one or more of these options:
- Case Insensitive — Makes the search case-insensitive.
- Regular Expression — Treats the term in the search field as a regular expression.
- Does NOT Contain Search Term — Returns matches that don't contain the term in the search field.
Click Search.
Copy, download, or save search results.
To view saved searches:
1. Select the ELM on the device tree and click .
2. Click Data and select the saved search from the Search Results.