The following table describes the user interface of the Simple Search Results Area:
| Element | Description |
|---|---|
| Search Results Summary Panel | A panel that summarizes the results of the search, and provides navigation to the result event pages. |
| Events Toolbar | Includes icons for expanding/collapsing events and for disabling/enabling analytics. |
| Events Area | A list of the events that match the search query. |
Search Results Summary Panel
The Search Results Summary Panel includes the following details:
| Element | Description |
|---|---|
| Search Summary | In the case of a simple search, displays the number of matching log events, the number of source logs of these events, and the period of time searched. In the case of a complex search, displays the number of results in the table, the number of events that the results are based on, the number of source logs of these events, and the period of time searched. |
 | Previous matching events icon. Clicking this icon displays in the Result Page Navigation Area, the numbers of the previous ten pages, and displays the first of these pages in the Search Results Area. |
 | Next matching events icon. Clicking this icon displays in the Result Page Navigation Area the numbers of the next ten pages, and displays the first of these pages in the Search Results Area. |
| Results Page Navigation Area | Displays the page numbers of up to ten pages of results. You can display the previous/next ten page numbers, by clicking the Clicking a page number displays that page of results in the Search Results Area. The current page number is highlighted in white. |
Events Toolbar
The Events Toolbar includes the following elements:
| Element | Description |
|---|---|
 / | Expand all Events / Collapse all Events icons. Clicking the |
 / | Enable Analytics / Disable Analytics icons. Clicking the |
Events Area
The Events Area includes a list of events resulting from the search, where each event contains the following items:
| Item | Description |
|---|---|
| Event date and time | The date and time that the event occurred, in the format MM/DD/YYYY HH:MM:SS. |
| Analytics layer | If Analytics is active, colors the suspicious column values according to the severity detected by Analytics, and shows the severity of the most severe column value. |
| Event structure | The structure of the event, including its column names and respective column text, in the format ([COLUMN_NAME] COLUMN_TEXT). |
Should describe the event date, the Analytics layer (if active), the event structure ([COLUMN_NAME] COLUMN_TEXT) and the event source fields (Log, Server and Applications)