Using the Investigator › Investigator › View Tabular Data

View Tabular Data

To find folders or data in the Investigator quickly, use the filter option. The Investigator displays filtered content that exactly matches your filter criteria, which can include alphabetic or numeric characters.

Note: This procedure applies only to the new investigations.

Follow these steps:

1. Launch the Investigator.
2. Select an option from the drop-down list in the discipline pane.
3. (Optional) Filter the objects by typing in the text box below the drop-down list.

   The tree displays filtered information.

4. Select an object from the tree to see its data in the Data pane.
5. Click the View Filter icon, if the search panel is not loaded.
6. Specify your filter criteria, and click Search.

Note: Narrow your search by adding criteria. To adjust the filter criteria, use the plus (+) and minus (–) buttons. To convert your upcoming text-inputs to upper case, select the Convert to Uppercase check box.

1. (Optional) View the SQL query behind the data in the table view by clicking the View SQL button in the toolbar.

   Note: To hide or show the search panel, click the View Filter icon in the Investigator toolbar.

   For the columns with a date as the value, select the search value from the calendar icon. For the columns with time as the value, select the search value from the drop-down list. For the columns having date and time as the value, select the search value using the calendar icon and the drop-down list.

   When you select a time-based object in the tree, the search panel displays date and time range filters. For time-based objects, by default, the table view presents data based on the default filters displayed in the Select Time Range panel. You can change the default date and time range filters using the calendar icon and the drop-down list. If you change the date and time range filters while doing a search, the changed filters are available for further searches during that Investigator session.

2. Click the Save icon in the toolbar, and click Save Query.
3. Define the query by performing the following steps in the Save Query dialog:
   1. Enter a name and (optional) description for the query.
   2. Set the Public or Private permission level.

      Note: All users can view the Public queries, but only the author of the query can delete it.

   3. Click Save.

   The query is saved. To view the saved query, select Saved Queries from the drop-down list in the Discipline pane.

Note: If you have customized the tabular view in the Investigator after running a search query, the customization is also saved with the query. When you run such a query, the Investigator displays the customized view. The Layout drop-down list lets you change the view. To view data without customization, select Current Layout from the drop-down list.

If you filter data after performing a navigation action, the filtering occurs on the data that the navigation action retrieved. The search panel header identifies the data.

Example:

As a system administrator, you are reviewing all user account data. To see the roles of a specific user, select that user from the Data pane, and click Show Roles in the Actions pane. The Data pane displays the roles for the selected user and the header indicates the same.

If you filter a specific role, the Data pane displays roles that are based on your filter criteria. If you click the X icon after filtering the roles, the Data pane displays roles for all users that match the filter criteria. If you click the X icon without doing any filtering, the Data pane displays roles for all the users.