Viewing Search Results; Basic Event View - Novell SENTINEL LOG MANAGER 1.0.0.5 - ADMINISTRATION GUIDE 03-31-2010 Administration Manual

10 Repeat
11 Click clear to clear the selected unique event field values from the REFINE pane and to return
to the previous search results.
12 Click add to search to add the refined search values to the current search tab and to perform a
new search after recalculating the unique event field values and counts.
NOTE: If you have already added the event field value to the current search tab, clicking clear
does not return to the previous search results.

5.3 Viewing Search Results

Searches return a set of events. You can view the search results in the basic view or in the advanced
view.
When results are sorted by relevance, only the top 50,000 events can be viewed. When they are
sorted by time, all the events in the system are displayed.
Section 5.3.1, "Basic Event View," on page 82
Section 5.3.2, "Event View with Details," on page 83

5.3.1 Basic Event View

The information in each event is grouped into General Event information, Initiator information,
Target information, Observer Information, Reporter information, and Customer values and retention
policy information. If the Collector that processed the raw data could not find the information for a
particular event field, information for that field is not displayed or is labeled as Unknown.
To view the raw data information:
1 Launch the Event Source Management (Live View) window.
82 Sentinel Log Manager 1.0.0.4 Administration Guide
Step 4-Step 9 to further refine the search.