Search List

The DLP Capture Search List manages the searches and their settings.

Option definitions

Category	Option	Definition
Menu bar	Filter	Drop-down list to select the display filter. Use Edit to create a filter. The available properties vary according to the Search setting. The filter can alternately be applied and switched off during the current session. Use Save to use a filter between sessions.
Menu bar	Group By	Drop-down list to organize the data display. Options are None, Status, and Type.
Search display area	Search List	Displays details about searches, their results, and their status based on the current selections. Select a search to run, duplicate, cancel, or delete it. Select the name of the search to view or edit its settings. Select the appliances link to see details of the appliances that were searched and their health status. From here, you can link to the Appliance Management feature. Select the results link to get information about any search results.
Actions	Cancel Search	Cancels the selected search without saving it.
	Delete Search	Deletes the selected search. Important Deleting the search deletes the search results and all related evidence from the evidence server.
	Duplicate Search	Duplicates the search to facilitate creation of modified searches.
	Export Results Summary	Creates a zip file that contains a summary and detailed information about the selected search and its results.
	New Forensic Investigation	Creates a new forensic investigation search.
	New Rule Tuning	Email Protection — Builds new email protection rule searches for testing. Network Communication Protection — Builds new network communication rule searches for testing (Trellix DLP Network Monitor only). Web Protection — Builds new web protection rule searches for testing.
	Run Search	Select a search and have it run immediately.
	Save as Rule	Select a rule tuning search to use it to create a new rule, or save it as an existing rule.
Duplicate Search	Select a search to create a copy of it for editing.