‎2012-08-09
01:54 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Using watchlists in Advanced trave views
Does anyone knows how to use watchlists in advanced charts or advanced tables ? They are very easy to use in standard trace views, but I can't find any reference in the documentation on how to use them in advanced trace views. Any help would be appreciated. Thanks
2 Replies
‎2012-09-26
11:18 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Hi PatrickChouinard,
Inside the enVision online help there is a topic called "Advanced Table Trace View (RSA enVision Event Explorer)" take a look to that topic to see if that is what you are looking for.
I hope this helps.
‎2012-11-13
04:27 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
Here is the format for using the watchlists in the traces
DEVICETYPENAME IN ('Windows Events (NIC)')
AND EVENTCATEGORYNAME LIKE 'User.Management.Groups.%' AND IN_Watchlist ("GROUP",'Windows High Profile Groups')
