There is a field called "TargetDataName" with a ID of rv36 that is a
tokenized field. This field stores the Folder path from Microsoft
file/folder audit messages. I have a folder structure that monitors a
shared folders for my clients and below is my folder structure:


and so on.

I want to alert when any things changes to the "root folder" that being
in my case of "D:\Shared" so I want a search where rv36 value is
EXACTLY "D:\Shared" and contains no client folders.

As this is a tokenized field, results are returning all data - can
someone help me do a search that will return a exact match on a
tokenized field please?

pimpalp's Profile: https://forums.netiq.com/member.php?userid=5587
View this thread: https://forums.netiq.com/showthread.php?t=51611