Endpoint Administration Guide for Windows › Monitoring and Auditing › The Audit Log › Audit Display Filters › Create a User-Defined Filter

Create a User-Defined Filter

You can build as many filters as you need. Create a custom filter when you want to view only a particular set of audit records.

To create a user-defined filter

1. In CA ControlMinder Endpoint Management click the Audit Events tab.

   The Audit Records Viewer - Filter Settings section shows the list of Saved Filters.

2. In the Saved Filters section, click Create Filter.

   The Audit Filter Wizard appears.

3. Complete the wizard pages.

   Choose Name and Switches

   Specifies the switches you want to use in your filter.

   Edit Switches

   Specifies settings for the switches you selected. Essentially these are masks that you can define for the audit events you want to filter.

   Edit Options

   Specifies the options you want to set for audit filtering.

   Click Finish.

   The new audit filter you defined is saved and loaded.