4. Investigation

## Event Search

After step 3, on**Events Search** page, you'll see the name of the behavior alert and the alert's key that are already filled in as the criterias of event search.

<Image align="center" src="https://files.readme.io/41c7ee7-events_search.png" />

Click "search" button to see the results.

<Image align="center" src="https://files.readme.io/2e233ae-events_search2.png" />

You are able to investigate all the syslog of the specific behavior alert (and its key).

<br>

## Flow Search