The number or results returned displayed on the UI. Note that the Search bar displays the number of results returned for every search. If the number of results matches the specified limit, the maximum number of search results is fetched, meaning there is more data available. The figure shows 1000 matches returned with the limit set at 1000. You can increase the limit to fetch more data.
Note
Selecting a limit of 100K disables the graph visualization and the UI switches to grid only mode. This also disables the grid and collapses the toggles. To re-enable the visualization, select a smaller number of results in the Limit list.
Search hostname / ipaddr
Use this field to search for host names or IP addresses. The search is not case-insensitive and looks for exact matches against both the source and target information for a logon. Use an asterisk to perform a wildcard search. For example, to find all services containing the prefix svc, enter svc* and then click Search.
Search username
Use this field to search for usernames.
Search Source or Target
Select whether you want the searches for IP, hostname, and username to search both source and target fields (default) or are restricted to only the source or target of an event.