Endpoint Administration Guide for Windows › Monitoring and Auditing › The Audit Log › Audit Display Filters

Audit Display Filters

The number of records in the audit log can become enormous. To reduce the number of records that display, use filters to specify the types of records for display. You can filter events by various criteria, including time or event type.

Note: You can also filter the audit records CA Access Control writes to the audit file using the audit configuration settings (audit.cfg file).

You can create a filter in CA Access Control Endpoint Management simply by giving it a name and choosing at least one switch. You can then select additional switches, and have the option of assigning one or more options. You can also filter records with the seaudit utility.

CA Access Control Endpoint Management provides several predefined filters, and you can create your own filters.