When viewing the details of a specific machine in the Timeline pane, I find the Search events field works so poorly that I have no trust in it at all. Is there a specific search syntax that I should be using to improve my search? For instance, I wanted to see how often the "Anomalous memory allocation" Process event showed up for a machine. Searching for Anomalous returns "No events found".
