Setting Event Criteria

While General Criteria always provides date/user/computer settings, Event Criteria settings vary by activity and filter the retrieved data records based on activity-related fields. By default there is no activity-related filtering. No "search" occurs, and ALL types of email, ALL web site domains, ALL types of file transfers, and so on, are retrieved. You can adjust Event Criteria so that it works with General Criteria to produce the cross-hair view you may require into the data. Problem areas come into focus, and charts become easier to read.  

Examples:

  • Monitor chat with a former employee. In a Data Explorer Chat/IM form, set the Event Criteria to search for the former employee's name.

  • Track movement of high-security documents. Modify Event Criteria for a Quick View Document Tracking chart to search for document names and/or paths.

  • Pinpoint unusual usage of bandwidth. Use Event Criteria to filter File Transfer records by protocols (such as Gnutella and Kazaa) and by "Download" activity.

To open the Event Criteria panel:

Open the Criteria box for a chart, report, or data form and select the Event Criteria tab.

To search for keywords in events:

Event Criteria applies to one chart

  • Event Criteria settings do NOT affect any other chart, report or data form.  

  • Changes to Global Criteria do not change your Event Criteria settings.

To select Program(s), Domain(s), Action or Type:

Below the Search options, Event Criteria may offer additional selections:

Click OK to apply the selections and generate the chart, form or report. Click Cancel to return to the previous selections and cancel the chart, form or report.

 

Related Topics

Chat / IM Event Criteria

Document Tracking Event Criteria

Email Event Criteria

File Transfer Event Criteria

Keystroke Event Criteria

Network Event Criteria

Online Search Event Criteria

Program Event Criteria

Screen Snapshots Criteria

User Activity Event Criteria

Web Site Event Criteria