Querying Quarantine Event Logs

Procedure

1. Go to Logs → Query.
2. Next to Type, select Quarantine events.
   The query screen for quarantine event logs appears.
3. Next to Dates, select a date and time range.
4. Next to Rule(s), specify any rule name keywords to search for.
5. Click Display Log.
   A rule name, quarantine event count, release event count, and release percentage appear for each rule.
6. Perform any of the additional actions:
   • To change the number of items that appears in the list at a time, select a new display value from the drop-down box on the top of the table.
   • To sort the table, click the column title.
   • To print the query results, click Print current page.
   • To save the query result to a comma-separated value file, click Export to CSV.