The text to search for in the audit log records. The search is case insensitive and based on a substring match, not a whole string match. For example, Acknowledged matches acknowledged , ACKNOWLEDGED , and unacknowledged . The search uses a logical OR when combining keywords. You can separate multiple entries with a comma, and use the tilde character (~) to indicate NOT. For example, if you enter login, logoff, ~user=admin, the report displays any records that contain the string login or logoff for all users except those user accounts that start with the string admin . If you enter login, logoff, ~ADMIN, the report displays any records that contain the string login or logoff but that do not contain the string admin anywhere within the record. |