Search log data

The [Domain] > AUDIT > Logging > Search tab lets you create reusable search criteria based on fields in the MFT Server user activity log.

 

Example: Only include user log records generated during a specified date range.

 

  • The results of the search criteria specified are accessed in the [Domain] > AUDIT > Logging > Results tab. Select the desired result, then click View or Export.

  • You can also apply a search result to a report created in [Domain] > AUDIT > Reports. Enter the search name in the [Domain] > AUDIT > Reports > Search results field - See Reporting on log data

 

To add a new search, click on the Search tab. The fields associated with a new search displays.

 

 

The Search fields are described below.

Name — Identifies the unique name of the search.

 

Return last X records — Identifies the maximum number of records to return.

 

The criteria include any combination of the following:

 

  • Date range

  • Application Instance ID

  • Session ID

  • Client IP

  • Client port

  • Server IP

  • Server port

  • Username

  • Client request

  • Client message

  • Server status

  • Server message

  • Inbound

  • Outbound

Select one or more of the above-described criteria, then select each criterion's corresponding comparison operator (e.g., =, !=, >, contains, matches, etc.). Enter a value for that criteria.

 

Click Search. The [Domain] > AUDIT > Logging > Results tab displays (see the image below).

Results

The Result tab displays a list of search results, generated by searches created in [Domain] > AUDITS > Logging > Search

 

The Results grid columns are described below.

Name — Identifies the name of the search.

 

Date — Identifies the date and time the search was created, or when it was last re-run.

 

Criteria — Identifies the criteria specified in the search.

 

Status — Identifies the status of the search.

 

  • A status of 100% indicates the search execution completed successfully.

 

 

The Results buttons are described below.

Refresh — Refreshes the results grid including the status column.

 

Export — Exports the selected result to a file.

 

  • When selected, an Export Log Search dialog displays.

     

     

    • File — Identifies the name of the search results file.

       

    • Click OK. The file downloads to your local Downloads folder. See Logging Results - Export for report details.

 

View — Displays the selected result in a modal window.

 

  • Only the last 50 records are displayed.

     

  • To see all the records (if there are more than 50), use the above-described export feature.

 

Note: The Export and View buttons are disabled if you select a search that is not displaying a Status of 100%

 

Re-run — Re-runs the selected result against the latest log data.

 

Delete — Deletes the selected result after confirming the action.