Define search criteria to filter the offense list and make it easier to see which
offenses you need to investigate. You can use the offense type in your search criteria to find all
offenses that are based on a custom property. You can filter the query results to show offenses that
have a specific custom property capture result.
Before you begin
The custom property must be used as a rule index. For more information, see Offense indexing.
Procedure
-
Click the Offenses tab.
-
From the Search list, select New Search.
-
On the Offense Source pane, select the custom property in the
Offense Type list.
The Offense Type list shows only normalized fields and custom properties
that are used as rule indexes. You cannot use Offense Source to search
DateTime properties.
- Optional:
To search for offenses that have a specific value in the custom property capture result, type
the value that you want to search for in the filter box.
-
Configure other search parameters to satisfy your search requirements.
-
Click Search.
Results
All offenses that meet the search criteria are shown in the offense list. When you view the
offense summary, the custom property that you searched on is shown in the Offense
Type field. The custom property capture result is shown in the Custom
Property Value field in the Offense Source Summary pane.