|
The text to search for in the audit log records.
The search is case insensitive and based on a substring match, not a whole string match. For example, Acknowledged matches acknowledged , ACKNOWLEDGED , and unacknowledged .
The search uses a logical OR when combining keywords. You can separate multiple entries with a comma, and use the tilde character (~) to indicate NOT.
For example, if you enter login, logoff, ~user=admin, the report displays any records that contain the string login or logoff for all users except those user accounts that start with the string admin .
If you enter login, logoff, ~ADMIN, the report displays any records that contain the string login or logoff but that do not contain the string admin anywhere within the record.
|