NAM Server ► Search

  • If you're an experienced NAM Server user, try the Quick start to dive right in and learn basic search capabilities by example.
  • For a more systematic introduction, go to the Overviewand carry on from there.

Quick start

  1. On the NAM Server, go to the search box at the top of the screen.
    NAM Server search icon
  2. Type some analyzer-specific search, press Enter,  and see what happens.
    For example, if you're interested in Oracle-EBS in your environment, try:
    • Oracle-EBS
    • Oracle-EBS application performance
    • what is Oracle-EBS application performance
    • what was Oracle-EBS application performance in the last hour
    • what was Oracle-EBS application performance yesterday
  3. Type some user-specific or server-specific searches.
    For example:
    • Enter the string
      to list anything (reports, operations, transactions, user names, etc.) that includes the substring "user".
    • Enter the string
      open user explorer
      to bypass the NAM Server menu structure and directly open the User explorer report. Useful if you know the name of the report you want.
    • Enter a specific user name, such as
      to list anything mentioning the user "someusername" (you obvious have to enter an actual user name on your system). If it gets a match on the Users page of the search results, you can drill down on the name:
  4. Drill down from search results to learn more.
    For example:
    1. Search for
      open user explorer
      to open the report called "user explorer".
    2. In the User name column, click a user and, in the pop-up menu, click Select user.
      This shows user details.
    3. Drill down from a table or chart.


A search on the NAM Server searches your:

  • Locations
  • Business hierarchy
  • Technical hierarchy
  • Synthetic agent names
  • Users
  • Alerts log
  • Reports

You can search for a simple string such as an IP address or you can issue a more complicated query as described below.

Regardless of how complicated the search query, the results are displayed (as described in the Results section below) in an easy-to-use report.

To search your NAM Server:

  • Click in the search box at the top of the NAM Server screen

  • or open the NAM Server menu

    and select Search from the menu.


See NAM reporting workflow for an overview of NAM Server reports.

Simple queries - string searches

Basic string searches are an easy way to start your analysis.

  • In this example, we want to research user MSTOJACZYK, so we just search on the string MSTOJACZYK

    and hope the user name is unique enough to make it easy to find in the results. There was only one match (on the Users tab, as we had hoped), so we check the results and drill down as needed. The User explorer is probably the place to start in this case.
  • In this example, we wanted to check server We just searched on the address to see what would turn up, which in this instance was matches in two categories: Technical and Users. You can see the hit counts on the tab names for Technical and Users, and you can see similar information on the tiles displayed on the Overview tab:

    We are looking for a server, so we click the Technical tab (or tile) to list details and drill down as needed.

Search results details

The Search results details screen shows search results divided into tabs:

  • Overview
    A summary of the search results, with a tile for each category that had matches for your search.
    Click a tile to open the corresponding search results tab.
  • Business
    A breakdown into search results such as applications, transactions, and tiers.
    Drill down to Operation explorer or Data explorer.
  • Technical
    A breakdown into search results such as software services, analyzers, server names, operations, tasks, modules, services, sites, areas, and regions.
    Drill down to Operation explorer.
  • Users
    A list of matching users.
    Drill down to User explorer or Operation explorer.
  • RUM
  • Synthetic
  • Network
    A breakdown of results into links and QoS.
    Drill down to Network explorer.
  • Alerts
    Click an alert time or message to drill down.
  • Reports
    The reports tab divides matching reports into two tables:
    • Dashboard reports – which are designed to be opened directly.
    • Other reports – which are designed to be part of the workflow (drilldowns, etc.), and which may require filters to run properly.

The Hits column shows a count of search hits for that report.

Elaborate queries - NAM Smart Search ("Casey")

In addition to simple string searches, you can enter questions like those described below. Each query opens an appropriate NAM report focused on the information you provide in the query string.

To customize these query definitions, see Customizing query definitions.

To open a specific report by name

(If you already know exactly what you want to open.)


  • Open Applications dashboard
  • open Network explorer for last 8 hours

This opens the NAM Server report you named in the Open query.

  • If you specified a time, the time range is set accordingly. Otherwise, it is set for today.
  • If the specified report cannot be found, a search is conducted on the named report.

If you know a report you want by name, you may find this an easier alternative to finding and selecting that report in the NAM Server menu structure and then setting the time.

To see a general overview


  • how are things
  • what's going on
  • what was going on yesterday
  • what's going on last hour

This opens the Applications dashboard – an overview of your application landscape.

To see availability, performance, or health for a user


  • what is the availability/performance/health on a certain server for Anna
  • what was the availability of server for user Anna
  • what is the performance of server for user Anna
  • what is the health of server for user Anna

This opens Operation explorer showing the server perspective filtered by user and server, which in the example is:

  • "User name = Anna"
  • "Server name ="

To see application performance


  • What is my easyTravel apps performance
  • How are my easyTravel apps doing
  • How is my easyTravel app doing
  • How was easyTravel application doing over last hour
  • What is the performance of my easyTravel apps today
  • What was my easyTravel app performance over last 8 hours

This opens Applications dashboard with (in the examples) "Application = easyTravel"

To see who is running an application


  • who is running easyTravel apps
  • how many users use easyTravel apps

This opens User explorer with (in the examples) "Application = easyTravel"

To see slow applications


  • Why are my apps slow
  • Why is easyTravel slow

This opens Operation explorer (Slow operation cause breakdown tab) to show a breakdown of slow operation causes for (in the examples)

  • all traffic for the selected time
  • the easyTravel app

To see a server perspective in the user explorer


  • can user Anna access server
  • is user Anna able to server
  • is user Anna affected at server
  • what is user Anna performance at server

This opens User explorer (servers perspective) filtered by user and server

To see what an application is doing


  • What does application easyTravel do

This opens the Operation explorer in the operations perspective filtered by "easyTravel" application.

To review alerts


  • What alerts were generated for application easyTravel
  • What alerts were sent


To review affected users


  • How many users were affected by performance
  • How many users were affected by network
  • How many users were affected by availability

These open the User explorer from the perspective of

  • performance
  • network
  • availability

To review user activity


  • What does user Anna do

This opens the User explorer filtered by user name ("Anna" in the example).

To see a synthetic overview


  • Have any tests failed

This shows an overview of top synthetic tests

To show a network overview from various perspectives


  • how is network for Gdansk location
  • what is network usage for Gdansk site
  • what is network availability for Gdansk location
  • what is network RTT for Gdansk site
  • what were network zero window size events for Gdansk location
  • what were network errors for Gdansk site last 8 hours

These open the Network overview filtered by

  • location
  • usage
  • availability
  • RTT
  • zwse
  • errors

To show the network from a location perspective


  • How is network for users from Gdansk site

This opens the Network explorer filtered on location ("Gdansk" in the example).

To see DNS information


  • Which sites were queried

This opens the DNS explorer without a filter.

To see the most active site, area, or region


  • What is the most active site
  • What is the most active area
  • What is the most active region

These open the Network locations overview from the site, area, or region perspective.

To see services


  • What software services are active on VLAN 0
  • Which services were used by Anna



You can finish any query with a time expression, where TIME is one the supported expressions listed here.

  • If you don't specify a time, the report time defaults to "Today".
  • You can use is and was interchangeably in these queries.

Each bullet point below is a list of one or more synonymous terms you can use for a certain time, with the definition following the colon.

  • now, recently: The last monitoring interval.
  • last 1 hour, the last 1 hour, last 1h, the last 1h, last one hour, the last one hour, last hour, the last hour: The last N hours.
  • last 2 hour, the last 2 hour, last 2 hours, the last 2 hours, last 2h, the last 2h, last 2hrs, the last 2hrs, last two hour, the last two hour, last two hours, the last two hours: The last N hours.
  • last 9 hour, the last 9 hour, last 9 hours, the last 9 hours, last 9h, the last 9h, last 9hrs, the last 9hrs, last nine hour, the last nine hour, last nine hours, the last nine hours: The last N hours.
  • today, this day: Today.
  • yesterday, 1 day ago, one day ago, the previous day, previous day: Yesterday.
  • 2 days ago, two days ago: 2 days ago.
  • last 7 days, last 7 day, last seven days, the last 7 days, the last 7 day, the last seven days: Last 7 days.
  • last 30 days, last 30 day, last thirty days, the last 30 days, the last 30 day, the last thirty days: Last 30 days.
  • week to date, this week. This week to date.
  • full week, last full week, previous week, the full week, the last full week, the previous week: The most recent full week.
  • month to date, this month This month to date.
  • full month, last full month, previous month: The most recent full month.
  • last 3 months, last three months, the last 3 months, the last three months: The most recent 3 months.
  • last 12 months, last twelve months, the last 12 months, the last twelve months: The most recent 12 months.
  • quarter to day, this quarter: The current quarter to today.
  • year to day, this year: This year to today.