Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Event Search

Search and investigate individual events — without digging through sessions.

Event Search is designed for fast, targeted investigations. Instead of navigating full user sessions, you can now query and explore events directly — with filters, saved views, download options, and links into your investigation workflows.

Goal

Find and investigate specific events across your customer traffic using structured filters, a sortable table, and inspector-level visibility — without needing to open every session.

  • Search for events across all sessions with flexible filters
  • Filter by event type, label, signature, entity values, and more
  • Save and share views and filtered data
  • Link directly to event, session, or entity pages
  • Export data for offline analysis
  • Flag patterns for deeper review

Getting Started

1. Navigate to the Event Search Page

Head to the Search tab from your main navigation panel.

Example of Event Search with selected columns applied.

Enter structured queries using key:value format. For example:

  • event: Refund Success
  • email: johndoe@email.com
  • action_count: >=5
  • date: "2025-07-01"-"2025-07-08"

As you type, the search bar will guide you with auto complete for fields like risk level, event types, or country codes. Hit "Enter" to finalize a filter value.

Each filter you apply becomes a pill that appears in the search bar and is reflected in the table. Each pill can be edited or deleted.

Date format and validation

  • Format (UTC): YYYY-MM-DD or YYYY-MM-DD hh:mm:ss
  • Optional operators: >, >=, =, <=, < > - Example: >2025-02-02
  • For ranges, use quotes: "2025-02-02" - "2025-02-03 02:00:00"
  • Data is available for the previous 365 days
  • Maximum range permitted: 90 days
  • Results default to the last 24 hours unless specified

Customize Your Table View

Click the Column Picker to choose which fields to show in your results. You can:

  • Add or remove columns
  • Sort by any column
  • Freeze (pin) up to 4 columns
  • Rearrange columns by drag-and-drop

Once you've tailored your table view, you can save it for later use. All saved views are available under "Saved Views" tab in a column picker sidebar.

Save & Share Search

When you’ve built a search you’ll want to revisit:

  1. Click the Save icon in the top-right.
  2. Enter a title for your search in the modal window.
  3. Click Confirm.

You’ll see a success toast, and a new search would be available at "Saved Searches" tab.

Access Saved Searches

To access saved searches:

  1. Open the Saved Searches tab at the top of the Event Search page.
  2. Browse the list of saved searches.
  3. Click any row to load the search.

You can also:

  • Copy links to share a saved search
  • Delete searches you no longer need
  • Edit a saved search or use it as a base to create another saved search.

Click Into Details

From the Event Search table, you can:

  • Click on an Event ID → opens Event Inspector
  • Click on a Session ID → opens USA Page
  • Click on an Entity → opens EB&L Inspector

Or, if you want to stay in context without navigating away, you can use the Event Flyout to preview key event details inline.

To open the flyout, click the magnifying glass icon in the row of the event you’re interested in. This lets you explore high-level information like risk, actions, entities, and more — without leaving the page.

Flag and Highlight Patterns

Hover on a value within the table (e.g., a specific signature) to flag it, which highlights matching values across the table. This helps you identify clusters or anomalies at a glance.

Export Your Results

Want to dig deeper or share offline?

  • Use the Download CSV option to export your current search results.

Pro Tips

  • Your filters are URL-based — you can copy the page URL anytime to share your current view.
  • Search includes support for operators like >=, =, and partial matching.
  • Browser navigation (back/forward) is supported — you won’t lose your table settings and filters.

Event Search makes investigations faster, clearer, and more precise.
Find what matters — instantly.