Defining an audit query

You can query for security or sync rules.

Do the following:

1. Select the type of audit that you want to perform by clicking either the Security rules or Sync rules radio button.

2. Select the type of resource you want to audit from the Resources drop-down list.

   By default the name property with a wild card search criteria appear in both the Resources and the Users drop-down lists. This means that the query returns all resources of the selected type.

   Information noteYou must select a type of resource and at least one Resource and User condition in your query; otherwise your query cannot return any results.
   The number of items that match your criteria are shown in parenthesis next to the property heading. The matching items for each type of condition are independent of each other.
3. Change the query conditions as required or click P to add further resource and/or user conditions to your query.
4. Use the context drop-down list to specify whether the security rule is used Both in hub and QMC, Only in hub or Only in QMC.
5. You can enter environment conditions for your query in the Client environment filter text field. For example: OS=Windows; IP=10.88.3.35.

6. Click Audit to perform the query.

   The results view is automatically updated with the results, if any, of your query.

You have now defined an audit query.