Novell SENTINEL RAPID DEPLOYMENT 6.1 - 12-2009 User Manual page 32

Basic Search
A basic search runs against all of the event fields in
searches include the following:
root
127.0.0.1
Lock*
driverset0
NOTE: If time is not synchronized between the end user machine and the Sentinel Rapid
Deployment server (for example, one machine is 25 minutes behind), you might get unexpected
results from your search. Searches such as Last 1 hour or Last 24 hours are based on the end user's
machine time.
1 Click the Search link on the left.
Sentinel Rapid Deployment is configured to run a default search for non-system events with
severity 3 to 5 the first time you the Search link. Otherwise, it defaults to the last search term
you entered.
2 For a different search, type a search term in the search field (for example,
not case sensitive.
3 Select a time period for which the search should be performed. Most of the time settings are
self-explanatory, and the default is Last 30 Days.
Custom allows you to select a start date and time and an end date and time for the query.
The start date must be before the end date, and the time is based on the browser's local
time.
All time searches all the data in the database.
4 Select Include System Events to include events that are generated by Sentinel Rapid
Deployment system operations.
5 Select Sort By Time to arrange data with the most recent events at the beginning.
Sorting by time takes longer than sorting by relevance, which is the default.
6 Click Search.
All fields in the index are searched for the specified text. A spinning icon indicates that the
search is taking place.
32 Sentinel 6.1 Rapid Deployment User Guide
Table 1-2 on page 37. Some sample basic
). The search is
admin