Search App

The Search app provides you with the ability to construct powerful query strings to pinpoint the data or objects in your environment that you want to examine.

The Search app provides different search methods, filters, and a Kibana-like query language to identify, categorize, and retrieve your search results.

The following table outlines the actions available in the Search app.

Action

Description

Perform a search

Select a search method, specify criteria, and click Search to start a query.

  • General: Allows you to search all data from your connected products using normalized search criteria

    Note:

    Not all products share the same database fields so you may have to try several different criteria options to locate the exact data you want.

  • Advanced: Allows you to select the exact source of the data that you want to search

    Note:

    The search field criteria that automatically populates, are a direct representation of the database fields for the chosen data source.

View search history

Click View History to open the Search History panel, which displays a list of previous searches.

You can load criteria from a previous search and perform a new search by clicking the search icon ().

Note:

Your browser saves the Search History data locally until you clear the browser cache. Trend Micro recommends saving search criteria that you may want to use for future queries.

Save search query

After performing a search, click Save query, type a name, optionally make the query Publicly available, and click Save to save the current search query.

Note:

Saving the query only saves the search criteria, not the search results. Use a saved query to find new data related to the same criteria.

View saved search queries

Click Saved Queries to open the Saved Queries panel, which displays a list of saved search queries.

  • Toggle the Publicly available control on () to allow anyone to use the query

  • Click the search icon () to display the related search criteria.

View search results

The search results area allows you to change the focus of the search data based on DATA GROUPING.

Note:

By default, the Search app only displays the Logged column in the results table. To change the default column view, see Modifying the Default Column View.