Previous Topic: Searching for EventsNext Topic: Run a Search


Available Searches

The following standard searches are available:

Content Search

Retrieves events based on their text content. Content searches can identify clusters of related documents, defined by their characteristic text patterns that reveal a shared subject or theme.

Content searches use intelligent pattern-matching technology to analyze the text content of indexed events in a content database and retrieve events that match the search criteria.

Note: Content searches are only available if explicitly included in your license agreement.

Data At Rest Standard Search

Retrieves Data At Rest events that match specific criteria. These events typically include files and other items scanned by the File Scanning Agent (FSA) and Client File System Agent (CFSA), plus files stored in an archive.

Data In Motion Standard Search

Retrieves Data In Motion events that match specific criteria. These events include: emails; network events entering or leaving your corporate network, including webmail and IM attachments and FTP file transfers; IM conversations captured by CA DataMinder Network; and web events, including file uploads.

Data In Use Standard Search

Retrieves Data In Use events that match specific criteria. These events include: files copied or saved to removable devices (such as USB flash drives), writable CD and DVD drives, and network locations; files sent to a printer; and instances when a user runs a specific application.

Quarantine Search

Retrieves quarantined emails.

Reviewer Search

(Available only with the Review Queue) Retrieves events in a user's personal review queue. These are events waiting to be reviewed.

Recent Incidents

Retrieves all events for a specified date range.

Standard Search

Retrieves events that match specific criteria. It covers all event types and includes all the commonly used search filters. This search include Settings to bulk audit duplicate events.

More information:

Bulk Audit Duplicate Events