Perform the following procedure to add Process Search terms.

Process searches explicitly support AND/OR operators. You can select from an array of filters to form your search using these AND/OR operators.


  1. On the navigation bar, click Process Search.
  2. Click Add Search Terms to add search terms (in the form of AND/OR operators).
  3. Select a search term type from the Choose Criteria drop-down menu.
  4. Click Add Search Term to add terms. When you are finished, click Add Terms. The search terms are validated, and you are notified if there is an error.

    For example, the following search terms display processes on Windows endpoints that have been received in the last 30 minutes.

    Note: To remove a search term, click the Delete (trashcan) icon to the right of the search term.

    To reset and remove all search terms, click Reset Search.