Go Up
You are here: IntelligenceInteractive SearchAdvanced ModeSearch Conditions

Search Conditions

When you apply filters at search, you can specify operators that should be used as conditions for data you want to retrieve and compare with the certain filter value. A condition can be, for example, Contains, Starts with, and so on.

The following operators can be used to specify search conditions:

Operator Description Example

Contains

This operator shows all entries that contain a value specified in the filter.

If you set the Who filter to contains John, you will get the following results: Domain1\John, Domain1\Johnson, Domain2\Johnny, John@domain.com.

Equals

This operator shows all entries with the exact value specified. Make sure to provide a full object name or path.

NOTE: To apply this operator when adding filters in the Simple mode, provide a value in quotation marks (e.g., "Domain1\John").

Use this operator if you want to get precise results, e.g., \\FS\Share\NewPolicy.docx.

Not equal to

NotEqualTo

This operator shows all entries except those with the exact value specified.

NOTE: In the Search field in the Simple mode, this operator appears as not, e.g., Who not for the Who filter.

If you set the Who filter to not equal toNotEqualTo Domain1\John, you will exclude the exact user specified and find all changes performed by other users, e.g., Domain1\Johnson, Domain2\John.

Starts with

StartsWith

This operator shows all entries that start with the specified value.

If you set the Who filter to starts withStartsWith Domain1\John, you will find all changes performed by Domain1\John, Domain1\Johnson, and Domain1\Johnny.

Ends with

EndsWith

This operator shows all entries that end with the exact specified value.

If you set the Who filter to ends withEndsWith John, you will find all changes performed by Domain1\John, Domain2\Dr.John, Domain3\John.

Does not contain

DoesNotContain

This operator shows all entries except those that contain the specified value.

NOTE: In the Search field in the Simple mode, this operator appears as not, e.g., Who not for the Who filter.

If you set the Who filter to does not containDoesNotContain John, you will exclude the following users: Domain1\John, Domain2\Johnson, and Johnny@domain.com.

In group

InGroup

This operator relates to the Who filter. It instructs Netwrix Auditor to show only data for the accounts included in the specified group. If you set the In groupInGroup condition for Who filter to Domain\Administrators, only the data for the accounts included in that group will be displayed.

NOTE: When you add a new search filter, the Contains operator is used by default.

To modify conditions for the selected filters, make sure you have switched to the Advanced search mode.

The image below represents the same search filters as they are shown in the Search field in the Simple mode.

Go Up