Search for Events in the Events Logging Page
Use the search and background search capabilities to view all logged events in the Event Logging page. Note that background searches can only be performed for historical events.
Procedure
Step 1 | In the navigation bar, choose . |
Step 2 | Click either the Historical or Live tab. |
Step 3 | Navigate to the search bar, type the search expression, and enter the Search button to execute the search. You can narrow or expand the search with an Absolute Time Range or Relative Time Range. Alternatively, from the Search drop-down list, choose Search in Background to execute the search in the background while you move away from the search page. You are notified when the search results are ready.  If you click the Search button, the results directly appear in the event table. Upon selecting any specific search result, the search criteria appears in the search bar for an easy reference. If you choose to execute the search in the background, the search operation is queued, and you are notified once the search is completed. You are allowed to execute multiple search queries in the background. |
Step 4 | Click the Background Searches button to view the Background Searches page.  The Background Searches page displays a list of search results. You can choose to view, download, or delete the search results. You can also navigate to the Notification Settings page to view or modify the subscription options. Select the Start a Background Search button to initiate a search from this page. |
What to do next
You can turn any background search into a scheduled background search if you need a recurring query. See Schedule a Background Search in the Event Viewer for more information.