Filtering audit logs

Audit Viewer (SSCAVW) enables you to filter on any audit item.

Click Filter on the toolbar or use Tools > Filter to display the Filter dialog.

The filtering functionality works with standard wildcards:

  • *word* - retrieves all occurrences where the text entered is preceded or followed by further text or no text.
  • word* - retrieves all occurrences where the text entered is preceded by no text and followed by further text or no text.
  • *word - retrieves all occurrences where the text entered is preceded by further text or no text and followed by no text.
  • exact - retrieves all occurrences where the text entered is preceded and followed by no text.

For example, to display all payloads for an event audit item, highlight the audit item row containing event and enter *payload as the Filter value. Press Enter. Click OK.

The results of the filter are displayed in a new window for you to analyze.