To focus on specific data, use the prompts to set filters for the following types of information:

• Cloud applications (managed and unmanaged)
• Event types, including activities, violations, anomalies, Cloud Data Discovery (CDD) activities, CDD violations, and Cloud Security Posture events
• Event sources, including API, DRM, Email, IaaS audit, Inline, Office 365 audit, and other event types

• Time range, including last hour, last 4 hours, last 24 hours, today, last week, last month, last year, and custom by month and day you select

  When you have selected the items from the lists, click Search.

  In the vertical navigation bar at the left, you can filter the data further:

  All available items are listed under each category.

  Click the > icon to expand the list for each category. If more than 10 items are available for a category, click More at the end of the list to see additional items.

  1. Select the search items from each of the prompts and click Search.

  The number of items matching the search criteria shows below the prompts.

  The search results show the total count of events.

  1. In the left menu, select the items to include in the filter.
• To include all items in a category, click the box next to the category name (for example, Activity Type).
• To select specific items, click the boxes next to them.

• To search for a user, enter a few characters of the user's name in the Search box under the

  Users category. Select the user name from the search results.

  Click Reset to clear the filters in the navigation bar. The search items you selected from the search prompts are not affected.

  To hide the navigation bar and allow more room to see the data after making your filter selections, click the left-arrow icon next to the Reset link.