Searching Machine Events Works Poorly

Brass Contributor

When viewing the details of a specific machine in the Timeline pane, I find the Search events field works so poorly that I have no trust in it at all.  Is there a specific search syntax that I should be using to improve my search?  For instance, I wanted to see how often the "Anomalous memory allocation" Process event showed up for a machine.  Searching for Anomalous returns "No events found". 


0 Replies