Searching Alerts
You can search for alerts using the search bar above the Alerts table. The search tool follows the Lucene syntax which supports a rich query language. For more information, see Apache Lucene - Query Parser Syntax.
To search on an item that is displayed in the Alerts table, simply click on the item and it will display in the Searches field.
You can also directly type in the Searches field to enter search criteria.
For example, you can enter
source:type:snort.To remove an item in the Searches field, mouse over the information in the Searches field until an x appears at the end of the text. Click on the x to remove the search filter and the operator following or preceding it.
To clear the entire Searches field, click the x at the end of the field.
