You can manually enter keyword searches or predefined search criteria in the Search field.
As you enter search criteria, the correct syntax appears. If you do not enter any search criteria, the system runs a search using *.* This displays every process that has executed. The processes are ranked according to the process start time — the most frequently executed processes are at the top. You can sort the results according to the count of events or last update time.
The Search field is expandable: click and drag the bottom right corner to display long queries.
The Search field and criteria fields can be used independently or in combination. When used in combination, the system combines them using an AND operator.
Clicking the blue Search button executes a search using selected parameters. When viewing events on the Process Search page, the time displayed next to the process is the time that the sensor recorded the event — not the time that the server received the event.
