Filtering incidents in MDR Web Console
February 12, 2024
To view specific incidents, you can create and apply filters to the incident list.
To create a filter for the incident list:
- In MDR Web Console, click the Incidents menu item.
The incident list opens.
- Click the funnel icon located above the incident list.
The Filter block appears.
Parameters available for filtering are:
Time period for incident creation.
Time period for incident update.
Incident priority. Available priorities are Low, Normal, and High.
Resolution for incident.
Available tenant names.
You can select the Default tenant value to view incidents that are not assigned to any of your tenants.
You can select the Default tenant value in addition to specifying tenant names.
Available MITRE tactics for incident response.
- Response statuses
Show only incidents with the selected statuses of corresponding responses.
- Click Save to apply the created filter. Click Clear to discard the created filter.
Only incidents that meet the selected parameters of the filter are shown in the incident list after the filter is applied.