Adding an Email Messages Advanced Search Filter

  1. To create an Email Messages advanced search filter, go to Detections > Email Messages, and then click Advanced.
  2. Select an attribute and an associated operator.
  3. Do one of the following to provide an action:
    • Type a value in the text box.

    • Select a value from the drop-down list.


    Type a keyword to search a partial match.


    You can add multiple criteria entries by pressing ENTER after typing a value.

  4. (Optional) Click AND or OR to include other criteria sets in the search filter.
  5. Click Apply.

    The Email Messages screen updates and displays data filtered by the search criteria. All search criteria sets are displayed in a summary.

  6. To save the search, do the following:
    1. Click the Save icon and select Save as.

      The Save As dialog appears.

    2. Type a name and an optional description, and then click Save.

      The name of the new saved search is added to the list of saved searches.


      A saved search includes any search filter you create and the current customized column settings.

  7. (Optional) Click the right-arrow icon beside the saved searches drop-down list to close the advanced search feature.