Search tutorial

Our search capabilities give you the ability to quickly find your events. Here are the steps to search for events. You can search for assets in the Assets tab in the similar way.

You'll notice the Search field above the Events list. This is where you'll enter your search query.

Start typing and we'll show you the event properties you can search like actor process, asset hostname, profile name, etc. Select the one you're interested in.

Now enter the value you want to match, and click Search. That's it! Your matches will appear in your assets list.

Tip - Use your queries to create dashboard widgets on the Dashboards tab.

How to search

Learn about group by options