# Global search and activity log

> Finding anything across assets, vulnerabilities, scans and credentials.

Source: https://scansuite.eu/documentation/usage/global-search
Last reviewed: 2026-10-19

## Global search

The search box in the top navigation, *Global search for threats or assets...*, queries four record types at once and returns them in one result list. It searches the current team only; switch team to search another.

| Result prefix | Fields searched | Opens |
|---|---|---|
| Assets: | Name, IP address, ports, severity, notes, technology, groups, tags, scan date and ID. | Assets, searched for the host |
| Vulnerabilities: | Title, class, CVE, target, product, scanner, description, status, owner, notes, tags and dates, among others. | Vulnerabilities, searched for the CVE (or the title) |
| Scan History: | Target, product, type, status, parameters, scanners, scan ID and the scan log. | Scan History, searched for the scan |
| Credentials: | User name and description of the credentials filed under a product, never the secret value. Results show the user name. | Credentials, searched for the user name |

Click a result, or press Enter for the first one. *No matches found* means nothing matched; *Search is unavailable* means the search itself failed — try again, and if it persists, see [Troubleshooting](https://scansuite.eu/documentation/installation/troubleshooting).

![ScanSuite global search results](https://scansuite.eu/static/assets/img/docs/usage/global-search/01.png)

*A global search surfacing vulnerability matches across the team’s data*

> **Note:** Search requires at least three characters. Shorter terms return nothing rather than everything.

This is the fastest way to answer "have we seen this host / CVE / credential before?" without knowing which product it was filed under. For searching within a single view, each page has its own filter — [Scan History](https://scansuite.eu/documentation/usage/managing-scan-execution), [Assets](https://scansuite.eu/documentation/usage/assets) and [Vulnerability Management](https://scansuite.eu/documentation/usage/vulnerability-management) all search their own records.

## Audit logs

Security-relevant activity in a team — member and account changes, sign-in configuration, integrations, policies and report downloads — is recorded in the team's activity log, which team admins read on the **Activity** tab of the **Teams** page.

See [Security logs](https://scansuite.eu/documentation/administration/security-logs) for the team and system logs, and [Troubleshooting](https://scansuite.eu/documentation/installation/troubleshooting) for the container and service logs that live on the host rather than in the console.