Creating new filters

You can create a new filter for audit messages from scratch or copy it from an existing filter.

No template

To create a new audit message filter

1. Select View > Define Filters from the menu.
2. Click New.
3. Enter a name for the new filter.

4. If you want the filter to be directly available in the Filter context-menu when you right-click an audit message source, select Show in Menu.

   You can always view all filters in the Select Filter dialog.

5. To filter audit messages for a specific time period, enter the respective date and time values in the From and To fields.
6. Select the audit message types to be viewed via the filter.

7. Click Advanced to filter by the contents of specific audit message fields:

   1. Select a field name.
   2. Select a condition type (e.g. starts with).
   3. Enter the value to use in the filter.
   4. Click New to add another filter criteria.
8. Click Summary to view all conditions set for the filter.
9. Click OK to save the filter.

Copy existing filter

To create a new audit message filter from an existing filter

1. Select View > Define Filters from the menu.
2. Select the existing filter you wish to use as a template.
3. Click Copy.
4. Enter a name for the new filter.

5. If you want the filter to be directly available in the Filter context-menu when you right-click an audit message source, select Show in Menu.

   You can always view all filters in the Select Filter dialog.

6. To filter audit messages for a specific time period, enter the respective date and time values in the From and To fields.
7. Select the audit message types to be viewed via the filter.

8. Click Advanced to filter by the contents of specific audit message fields:

   1. Select a field name.
   2. Select a condition type (e.g. starts with).
   3. Enter the value to use in the filter.
   4. Click New to add another filter criteria.
9. Click OK to save the filter.