# Searching Flight Recorder Information

Defining the attributes of the flight recorder in the console is an administrative function and must be performed prior to accessing the flight recorder. However once done, the flight recorder information can be accessed and searched. To do this, simply click on **Flight Recorders** in the console tree.

You will be presented with the following search screen:

<figure><img src="/files/6Byxj8L879zwzbWvtzNt" alt=""><figcaption><p>Flight Record: History: attack</p></figcaption></figure>

You can select ranges of fields for searching or simply click the **Search** button to view all Flight Recorders:

<figure><img src="/files/swvFQsqChcQJq0KuALOz" alt=""><figcaption><p>Searching</p></figcaption></figure>

In this case there is one Flight Recorder in the ATTACK table in the HISTORY database. You can see the `DEVICE_ID` used to trigger the attack, when it was started and its status *(**Open** meaning that it is still recording, **Closed** meaning that recording for the specified `DEVICE_ID` has been stopped).*

Following this is the number of records recorded so far for the given `DEVICE_ID`, the reason for the trigger, the IP address, the User ID *(if known)*, the Case Number if a case has been triggered and the Browser used at the time of the trigger.

We can deduce that someone attempted an SQL injection attack in the password field on the QwertyLogon page.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.tomorrowx.com/cap/product-reference/working-with-flight-recorders/searching-flight-recorder-information.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.