Unsupported Search Syntax and Content

This topic describes unsupported search syntax and content for process event searches on the Process Analysis page.

Unlike search on the Process Search page, the use of field names is not supported in search on the Process Analysis page. On the Process Search page, key:value pair format is supported, but it is not supported on the Process Analysis page. Simply specify the value without specifying the respective key (field name).

The use of logical Boolean operators, like AND, OR, NOT, XOR, is not supported in search on the Process Analysis page.

Search for the Event type, like filemod, regmod, and so on, is not supported. To specify the Event types you are looking for, use the Event type Filters section.

Content contained in the Binary Metadata and Alliance Info sections is not searchable.