Filter Audit Logs

Filtering the audit logs allows you to display only those items of interest. You can filter based on any of the following:

■   When—display logs that occurred within a specified time range.
■   Who—display logs related a specific user or users.
■   What—display logs for one or more operations, such as Create, Read, Update, and so on.
■   Entity Type—display logs for resource types that the audit log is associated to.
■   Result—display logs for success or failure.

To filter the audit logs, do the following:

1.   Click Filter.

The quick view for Audit Log Filters displays.

2. Specify any or all of the following:
  • Start Date and End Date to display logs within a specific time range.
  • Who limits the scope of what displays on the Audit Logs page to a specific user or users.
  • What narrows the logs to the types of operation that the log is related to. You can select multiple operations. Select All Operations to apply all operation types as part of the filter criteria.
  • Entity Type allows you to select the required entity type such as host name, device ip and so on.
  • Result narrows the logs related to failures or successes. Select All Results to apply both success and failure to the filter criteria.
  • Tags associated to the audit logs which are acquired from a resource object
3. Click OK to apply the selected filters to the Audit Logs page.