Audit parameters
Use audit parameters to specify the details of your search results.
Time Range
- Relative
-
A time range relative to the current time. Under Within, select a number and a time period. For example, 3 weeks.
- Specific date
-
A time range with a specified start and end date, such as “March 27 to April 10.”
Filter type
Limit the search results based on the specified parameters.
- Resource ID
-
Find activities by resource ID.
- Correlation ID
-
Find activities by correlation ID. When an HTTP request is received, it is assigned a correlation ID. You can use the correlation ID to associate HTTP responses with messages in the event log.
- Event type
-
Find activities by event type. Select an event type from the list. For more information, see Event types.
- User ID (Actor)
-
Find activities that were performed by a particular user, by user ID.
- User name (Actor)
-
Find activities that were performed by a particular user, by user name.
- Client (Actor)
-
Find activities that were performed by a particular client. Select a client from the Filter list. The list of clients varies depending on your configuration.
- Resource population
-
Find activities that were performed in resources within a particular population. Select a population from the list.
- Resource type
-
Find activities that were performed on a particular type of resource. Select a resource from the list.
- Population
-
Find activities that were performed on a particular population.
- User
-
Find activities that were performed on a particular user.
- Application
-
Find activities that were performed by a particular client application.
Selected fields
Specify which fields appear in the results list.
- Timestamp
-
The date and time of the event. The format is: MM/DD/YYYY HH:mm:ss.
- Event name
-
A unique identifier for the event.
- Description
-
A brief description of the event.
- Client
-
The client that performed the event.
- User identity
-
The user for which the event was performed.
- Population
-
The population for which the event was performed.
- Resource type
-
The type of resource for which the event was performed.