Viewing the search results table

Expand all | Collapse all

The search results table for devices or events is displayed in the KICS for Networks → Search section of the Web Console. The table shows only the data that can be used to perform a device search or event search. Any found items are grouped based on their respective Servers.

When viewing the table, you can utilize the following functions:

• Filtering search results

  To filter the search results table, you can utilize the following interface elements in the toolbar:

  • Security states.

    This filter is available in the results table for device searches. You can use the filter buttons to hide some of the found devices depending on their security states.

  • Severity

    This filter is available in the results table for event searches. You can use the filter buttons to hide some of the found events depending on their severity levels.

  • Technologies.

    This filter is available in the results table for event searches. You can use the filter buttons to hide some of the found events depending on the technologies that were used to register them.

  • Servers.

    This drop-down list lets you select specific Servers for displaying search results.

• Updating search results

  Information about devices or events could be changed on the Servers while you are viewing the search results table. The Last update field displays the date and time when the results were last loaded.

  You can repeat a search request to update the results by clicking the Update button in the toolbar.

• Displaying information on Server web interface pages

  Do one of the following:

  • To receive detailed information about one of the found items, open the web interface page of the corresponding Server by clicking the link containing the device name or the event title.
  • To receive information about all the found items that meet the search request criteria, open the web interface page of the corresponding Server by clicking the Go to Server link.

  The Kaspersky Industrial CyberSecurity for Networks Server web interface page opens on a new tab in the browser window. The name of the opened tab will be the Server name that was defined during initial configuration of the application after installation.

  If Single Sign-On technology is in use and the Web Console user has the permissions to connect to this Server, access to the Server web interface will be granted without prompting the user for their user account credentials.

  On the Server web interface page, the relevant section automatically opens to show the devices table or events table. The table will be filtered based on the corresponding criteria.