How can an analyst search for all events that include the keyword "access"?

The Log Activity tab in IBM QRadar is the primary interface for viewing and investigating individual log events. It features a "Quick Filter" search bar at the top of the event list. Typing a keyword like "access" into this bar initiates a real-time, full-payload search across all displayed events, providing the most direct and efficient way to find all events containing that specific term.

A. The Network Activity tab is used for analyzing network flows, not log events. A search here would not return event data.
C. The Offenses tab displays aggregated security incidents (offenses), not individual raw events. A search here would query offense data only.
D. This AQL query is flawed; it only searches the eventname field. A proper payload search requires TEXT SEARCH, and the quick filter is simpler.

1. IBM QRadar SIEM User Guide. (2023). Investigating events. "In the Quick Filter field, type a word or phrase that you want to search for in the event payload." This describes the functionality of the search bar on the Log Activity tab.