CdaSearchCriteria

Represents a search criteria object that defines the filters to use to find sessions that can be passed to other cmdlets. For example, you can create a search criteria object to define the sessions that are applicable for a given audit role. The following properties are defined for this object.

Property Type Description

Application

String array

 

Filter sessions by using the Windows application name used.

AuditStore

String

Filter sessions by using the name of the audit store.

ClientName

String

Filter sessions by using the client name of the session.

Comment

String array

Filter sessions by using the comments that have been added by reviewers to the session.

Group

String array

Filter sessions by using the session owner's Active Directory security group.

Installation

String

Filter sessions by using the name of the audit installation.

Machine

String

Filter sessions by using the host name of the computer where the session ran.

ReviewStatus

Enum

Filter sessions by using the session review status. The valid values are:

  • 0 for None
  • 1 for ToBeReviewed
  • 2 for Reviewed
  • 3 for PendingForAction
  • 4 for KeepForever
  • 5 for ToBeDeleted

State

Enum

Filter sessions by using the status of the session. The valid values are:

  • 0 for InProgress
  • 1 for Terminated
  • 2 for Disconnected
  • 3 for Completed

TimeAfter

DateTime

Filter sessions that ran after a specific date and time.

TimeBefore

DateTime

Filter sessions that ran before a specific date and time.

TimeBetween

DateTime

Filter sessions that ran between a start time and an end time.

Type

Enum

Filter sessions by using the session type. The valid values are:

  • 1 if the session is a Windows session
  • 2 if the session is a UNIX session

UnixCommand

String array

 

Filter sessions by using the UNIX command line input and output.

UnixCommandName

String array

Filter sessions by the UNIX command name only.

UnixCommandTimeAfter

DateTime

Filter sessions that ran after a specific date and time based on the UNIX command input time.

UnixCommandTimeBefore

DateTime

Filter sessions that ran before a specific date and time based on the UNIX command input time.

UnixCommandTimeBetween

DateTime

Filter sessions that ran between a start and end time based on the UNIX command input time.

UnixOutput

Text

Filter sessions by using the UNIX terminal output text captured in the session.

User

String

Filter sessions by using the user name associated with the session.