Procedure:

1. Log in to the SMS from a client.
2. On the top Navigation menu, click Events.
3. On the Events screen, click Inspection Events in the Navigation pane. The Events - Inspection Events screen displays.
4. On the Query pane, select the triangle symbol (▶) next to Device/Segment Criteria to expand this option.
5. In the Segment and Devices areas select one or more items in the lists you want to include in your query. You can expand a listing to select individual entries or select a top-level list item to include every item listed under it.
6. Enter the number of matching rows (1 - 10,000) to list in the Display Pane. Limiting the number of rows may decrease the query processing time.
7. Click Refresh. The returned attack events are displayed in the List pane.
8. To save this query, click Save As. When prompted, enter a name for the query. The query will be displayed in the Saved Queries section of the Events Navigation pane. To create a new query, click Clear. The query pane will reset and clear the criteria fields.

Note: You are not required to complete all query fields. Complete only as many as you need to execute your query successfully.

 

Reference: SMS User Guide