Click a checkbox to apply the filter to that column in the grid view.
To clear a field filter, click the clear button.
Selected values for the same category are applied in an OR operation (example, host A or host B)
Selected values across categories are applied as an AND operation (example, successful RDP)
Time filters can be used to reduce events to a window of time. For example, if you click 02:00 - 03:59, it should only show logon events between 2am and 4am UTC. All times are presented in UTC unless otherwise specified.
Initiating a new search clears all existing filters.
.png) |