how-to · history Open this in the console

Find an audit line by a word.

Audit. The box is empty by default, so every loaded line is listed.

Clear the box, or press clear filters, and the hidden lines come back. Searching does not delete the record.
01

Start with the box empty

Open Accounts server, then leave it, then open Audit. The search box is empty. Two lines are from that visit: opened · overview, and viewed, with how long. Search looks through the kind, the machine name, who did it, and the summary.

Audit trail with an empty search box and the opening and leaving of Accounts server
All lines. The search box is empty. Opening Accounts server, and leaving it.
02

Type a word from the opening

Type opened. The opening stays, because that word is in the kind and in the summary opened · overview. The leaving line drops out: it says viewed, not opened. The count says 1 of 2 records match. Clear the box and the leaving line returns. A word that matches nothing says no records match this search, and the stored lines stay.

Audit search for opened, showing only the machine opened line
opened. The opening stays. The leaving line is hidden.

One machine is Limit the audit trail to one machine. One kind of line is Show when someone opened a machine. The whole page is Search the audit trail.