1. From the Reveal menu, click Rules.
  2. Click a rule that has matches that you want to investigate.

  3. Under Results, Reveal displays the endpoints where matches have occurred.

  4. Select an endpoint and click Connect. A live connection is opened to the endpoint. When the endpoint connection state displays as Active, click the endpoint name to view files that contain matches.
  5. For files where matches have occurred, the file name, number of hits, and path are displayed.
  6. Click an affected file to view snippets that show pattern matches in context.