HP IAP Version 2.1 User Guide, March 2011

Completing the Search for field
TIP:
You can use Boolean operators AND, OR, and NOT to enter multiple criteria in this field. For example,
jdoe AND Search; Mail OR Export; jsmith* NOT jsmithson. For more information on
Boolean expressions, see “Boolean query expressions” on page 58.
You can also use wildcards (* and ?). See “Matching words” on page 54.
To complete the Search for field when performing a search of the AuditLog repository:
• Enter a specific user name, in one of the following forms:
• User ID: Enter the login name of the user, such as jdoe.
• First Name: Enter the user's first name, such as John, as shown in the LDAP directory (address
book).
• Last Name: Enter the user's last name, such as Doe, as shown in the LDAP directory.
The search results will include the user's logged sessions in the Web Interface, plus any logged
actions on email that was sent to or from the user.
The results might also include logged actions on email where the user's name was in the Subject
header. This would depend on the form of the name you use in the search.
To search only for actions the user performed, use the Author field in the Advanced Search form.
• Enter the type of action performed, from the table below.
Table 8 Logged actions and descriptions
DescriptionLogged action
Actions performed by users in the Web Interface
Simple or advanced searches performed by the user.Search
Information about the query results returned or displayed.Query Result
Navigation through the query results.Navigation
Email displayed from the query results.View Message
Files displayed from the query results.View Document
Files downloaded by the user.Download
Email sent to the user.Mail
Email or files exported by the user.Export
Query criteria saved by the user.Save Query
Query results saved by the user.Save Query Result
Saved query results placed in a quarantine repository by the user.Start Quarantine
Quarantined query results deleted by the user.Delete Quarantine
HP IAP 2.1 User Guide 41