Search Event Data from Logger

You can search Logger archived events using the same parameters as in regular searches.

Before running a search on the Logger data, review the following considerations:

• The query uses only the specific set of operators available in the Search feature. If you are used to the query format in Logger, we recommend that you review the query functionality in Search.
• Your searches can include data from Logger storage groups even if the Logger storage groups do not display as part of the ArcSight Database’s configuration.
• Before searching for Logger events from a particular Logger, metadata from that Logger must have already been imported, and at least one data migration from that Logger must have been completed.

1. Select Search > +.
2. From the list box next to the Search button, select Logger.

3. Add the required query details.

   You must use the search operators supported in ArcSight Platform.

4. Click Search.