13.5 Viewing the Search Activities

You can view the search activities that are being done on the target server by the search initiator server. You can see what queries are being done and how frequently they are being done. Based on the search activity, you might want to assign a more/less restrictive proxy role or even disable access to the target server.

You can also refine the search activity query. For example, you can change the date range to see what queries have been performed today or yesterday or in the last hour, or you can drill down to see the queries that were made by particular users on the search initiator.

  1. Log in to the target server as a user in the administrator role.

  2. Click Search Setup in the toolbar.

    The Search configuration page that is displayed has two tabs: Search Targets and Authorized Search Initiators. The Search Targets tab is selected by default.

  3. Select the Authorized Searcher Initiators tab.

    A list of search initiator servers is displayed under the Authorized Search Initiators list.

  4. Click the Search Activities link for the search initiator server for which you want to view the search activities.

    The search activities page is displayed that lists the audit events that are retrieved from all of the distributed search requests the target server has received from that particular search initiator.