Searching Activity Logs
Syntax help displayed in UI for Activity Log tokens. A complete list of tokens for writing search queries is provided below. Click each token to learn more about it.
Use a text value ##### to search results for certain action such as Add, Update, Edit, Delete and so on.
Example
Show results for action as edit
action:edit
Use quotes or backticks within values to help you search all activity logs that have the specified word as their user name.
Examples
Show any results with this name
userName:JohnDoe
Show any results that contain parts of name
userName:"JohnDoe"
Show any results that match exact value "JohnDoe"
userName:`JohnDoe`
Use a text value ##### to find activity logs with certain user roles such as Manager, Reader and so on.
Example
Show activity logs for user role as Manager
userRole:Manager
Use an integer value ##### to search activity logs with specific Source IP.
Example
Show activity logs with SourceIp 1.1.1.1
sourceIp:1.1.1.1
Use a text value ##### to search activity logs on a specific module using that module code such as SM, VM, PM and so on.
Example
Show activity logs for module code as PM
moduleCode:PM
Use an integer value ##### to search activity logs for a specific target name.
Example
Show activity logs for target name 656575137
targetName:656575137
Use a text value ##### to search activity logs for a specific target type such as cm_scan,auth,authentication, account and so on.
Example
Show activity logs for target name authentication
targetType:authentication