Skip to content

Commit 94812eb

Browse files
author
Aleks Mashanski
committed
Fixed filters.md topic
1 parent 636dd87 commit 94812eb

File tree

1 file changed

+17
-17
lines changed

1 file changed

+17
-17
lines changed

‎docs/auditor/10.7/api/filterreference/filters.md‎

Lines changed: 17 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -9,21 +9,21 @@ sidebar_position: 10
99
Review the table below to learn more about filters. The filters correspond to Activity Record
1010
fields.
1111

12-
| Filter | Description | Supported Operators |
13-
| ----------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
14-
| RID | Activity Record ID. Limits your search to a unique key of the Activity Record. Max length: 49. | <ul><li>Contains (default) <br></li><li>DoesNotContain <br></li><li>Equals <br></li><li>NotEqualTo <br></li><li>StartsWith <br></li><li>EndsWith</li></ul> |
15-
| Who | Limits your search to a specific user who made the change (e.g., _Enterprise\Administrator_, _[email protected]_). Max length: 255. | <ul><li>Contains (default) <br></li><li>DoesNotContain <br></li><li>Equals <br></li><li>NotEqualTo <br></li><li>StartsWith <br></li><li>EndsWith <br></li><li>InGroup <br></li><li>NotInGroup</li></ul> |
16-
| Where | Limits your search to a resource where the change was made (e.g., _Enterprise-SQL_, _FileStorage.enterprise.local_). Max length: 255. | <ul><li>Contains (default) <br></li><li>DoesNotContain <br></li><li>Equals <br></li><li>NotEqualTo <br></li><li>StartsWith <br></li><li>EndsWith</li></ul> |
17-
| ObjectType | Limits your search to objects of a specific type only (e.g., _user_). Max length: 255. | <ul><li>Contains (default) <br></li><li>DoesNotContain <br></li><li>Equals <br></li><li>NotEqualTo <br></li><li>StartsWith <br></li><li>EndsWith</li></ul> |
18-
| What | Limits your search to a specific object that was changed (e.g., _NewPolicy_). Max length: 1073741822 | <ul><li>Contains (default) <br></li><li>DoesNotContain <br></li><li>Equals <br></li><li>NotEqualTo <br></li><li>StartsWith <br></li><li>EndsWith</li></ul> |
19-
| DataSource | Limits your search to the selected data source only (e.g., _Active Directory_). Max length: 1073741822 | <ul><li>Contains (default) <br></li><li>DoesNotContain <br></li><li>Equals <br></li><li>NotEqualTo <br></li><li>StartsWith <br></li><li>EndsWith</li></ul> |
20-
| Monitoring Plan | Limits your search to a specific monitoring plan—Netwrix Auditor object that governs data collection. Max length: 255. | <ul><li>Contains (default) <br></li><li>DoesNotContain <br></li><li>Equals <br></li><li>NotEqualTo <br></li><li>StartsWith <br></li><li>EndsWith</li></ul> |
21-
| Item | Limits your search to a specific item—object of monitoring—and its type provided in brackets. Max length: 1073741822. | <ul><li>Contains (default) <br></li><li>DoesNotContain <br></li><li>Equals <br></li><li>NotEqualTo <br></li><li>StartsWith <br></li><li>EndsWith <br></li><li>Various item types such as AD container, NetApp, Computer, Office 365 tenant, Domain, Oracle Database instance, EMC Isilon, SharePoint farm, etc.</li></ul> |
22-
| Workstation | Limits your search to an originating workstation from which the change was made (e.g., _WKSwin12.enterprise.local_). Max length: 1073741822. | <ul><li>Contains (default) <br></li><li>DoesNotContain <br></li><li>Equals <br></li><li>NotEqualTo <br></li><li>StartsWith <br></li><li>EndsWith</li></ul> |
23-
| Detail | Limits your search results to entries that contain the specified information in Detail. Max length: 1073741822. | <ul><li>Contains (default) <br></li><li>DoesNotContain <br></li><li>Equals <br></li><li>NotEqualTo <br></li><li>StartsWith <br></li><li>EndsWith</li></ul> |
24-
| Before | Limits your search results to entries that contain the specified before value in Detail. Max length: 536870911. | <ul><li>Contains (default) <br></li><li>DoesNotContain <br></li><li>Equals <br></li><li>NotEqualTo <br></li><li>StartsWith <br></li><li>EndsWith</li></ul> |
25-
| After | Limits your search results to entries that contain the specified after value in Detail. Max length: 536870911. | <ul><li>Contains (default) <br></li><li>DoesNotContain <br></li><li>Equals <br></li><li>NotEqualTo <br></li><li>StartsWith <br></li><li>EndsWith</li></ul> |
26-
| Action | Limits your search results to certain actions (e.g., Added, Removed, Modified, Read). | <ul><li>Equals (default) <br></li><li>NotEqualTo <br></li><li>List includes Added, Removed, Modified, Read, Moved, Renamed, Checked in/out, etc.</li></ul> |
27-
| When | Limits your search to a specified time range. Supports various date/time formats. | <ul><li>Equals (default) <br></li><li>NotEqualTo <br></li><li>Within timeframe: Today, Yesterday, LastSevenDays, etc. <br></li><li>From..To interval</li></ul> |
28-
| WorkingHours | Limits your search to the specified working hours. You can track activity outside business hours by using the NotEqualTo operator. | <ul><li>"From..To" interval <br></li><li>Equals (default) <br></li><li>NotEqualTo</li></ul> |
12+
| Filter | Description | Supported Operators |
13+
|-------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
14+
| RID | Activity Record ID. Limits your search to a unique key of the Activity Record. Max length: 49. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith |
15+
| Who | Limits your search to a specific user who made the change (e.g., _Enterprise\Administrator_, _[email protected]_). Max length: 255. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith, InGroup, NotInGroup |
16+
| Where | Limits your search to a resource where the change was made (e.g., _Enterprise-SQL_, _FileStorage.enterprise.local_). Max length: 255. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith |
17+
| ObjectType | Limits your search to objects of a specific type only (e.g., _user_). Max length: 255. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith |
18+
| What | Limits your search to a specific object that was changed (e.g., _NewPolicy_). Max length: 1073741822 | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith |
19+
| DataSource | Limits your search to the selected data source only (e.g., _Active Directory_). Max length: 1073741822 | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith |
20+
| Monitoring Plan | Limits your search to a specific monitoring plan—Netwrix Auditor object that governs data collection. Max length: 255. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith |
21+
| Item | Limits your search to a specific item—object of monitoring—and its type provided in brackets. Max length: 1073741822. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith, Various item types such as AD container, NetApp, Computer, Office 365 tenant, Domain, Oracle Database instance, EMC Isilon, SharePoint farm, etc. |
22+
| Workstation | Limits your search to an originating workstation from which the change was made (e.g., _WKSwin12.enterprise.local_). Max length: 1073741822. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith |
23+
| Detail | Limits your search results to entries that contain the specified information in Detail. Max length: 1073741822. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith |
24+
| Before | Limits your search results to entries that contain the specified before value in Detail. Max length: 536870911. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith |
25+
| After | Limits your search results to entries that contain the specified after value in Detail. Max length: 536870911. | Contains (default), DoesNotContain, Equals, NotEqualTo, StartsWith, EndsWith |
26+
| Action | Limits your search results to certain actions (e.g., Added, Removed, Modified, Read). | Equals (default), NotEqualTo, List includes Added, Removed, Modified, Read, Moved, Renamed, Checked in/out, etc. |
27+
| When | Limits your search to a specified time range. Supports various date/time formats. | Equals (default), NotEqualTo, Within timeframe: Today, Yesterday, LastSevenDays, etc., From..To interval |
28+
| WorkingHours | Limits your search to the specified working hours. You can track activity outside business hours by using the NotEqualTo operator. | "From..To" interval, Equals (default), NotEqualTo | |
2929

0 commit comments

Comments
 (0)