Event search

Using the event search function, you can quickly find events of selected types, during specified time frames.

Prerequisites

In order to be able to utilize the event search function, you need make sure that events are ingested and logged. In order to ingest and log events, you need to have event retention set on the device and have created a log rule for the device.

See manage device on how to set event retention for the device, and event log rules on how to create an event log rule.

Overview

YourSixOS allows users to search for events across multiple indexes:

• Devices: Device events (e.g. AOA, VMD, disconnect)
• Alarm Groups: Alarm group events (e.g. armed, disarmed overrides)
• Peripherals: Peripheral events (coming soon)
• Barriers: Barrier events (e.g., access granted, alarms, mode changes)
• Identities: Barrier events indexed by identity (e.g., access granted, access denied)

See the event catalog for details on the available event types.

Performing a Search

1. Navigate to the Forensics tab in the top navigation menu.
2. From the left context menu, select Events.
3. On the event search page:
   • Select the desired event index along the top (Devices, Alarm Groups, Peripherals, Barriers or Identities).
   • Define your search criteria based on the selected index.
   • Choose the date range for the search.
   • Select the event type to filter results.
4. Click Search to run the query.

Viewing Results

• Results appear as a list with details for each event.
• Clicking an event timestamp opens the event in the Matrix, if applicable.
• Video footage for device events will only be available if a recording rule is configured and footage exists.