Saving an Audit Logger Query

To create a Saved Query in the Audit Logger:

1.

In the side bar, select Events >Audit LoggerThe TLC Console1. Tripwire Log Center Console is the software for the TLC graphic user interface (GUI), or 2. The Tripwire Log Center GUI. Through the TLC Console, you can configure TLC, oversee your TLC environment, and manage log and event data. component in which you can work with the log messages collected by TLC..

2.

In the Audit Logger, select the Query tab.

3.

Enter your criteria for the query in the Query Criteria tab (see Working with Audit Logger Queries). The following criteria are required.

a.

In the Name field, enter a name for the Saved Query.

b.

Specify one or more ClassificationThe process of categorizing log messages with Classification Tags. Tags and/or Terms.

4.

To run the query, click Start.

5.

If the query produces the desired results, click Save in the Query Criteria tab to save the query.