Kaspersky Managed Detection and Response

Filtering incidents in MDR Web Console

February 12, 2024

ID 198732

To view specific incidents, you can create and apply filters to the incident list.

To create a filter for the incident list:

  1. In MDR Web Console, click the Incidents menu item.

    The incident list opens.

  2. Click the funnel icon located above the incident list.

    The Filter block appears.

    Parameters available for filtering are:

    • Created

      Time period for incident creation.

    • Updated

      Time period for incident update.

    • Priority

      Incident priority. Available priorities are Low, Normal, and High.

    • Status

      Incident status.

    • Resolution

      Resolution for incident.

    • Assets

      Available assets.

    • Tenant

      Available tenant names.

      You can select the Default tenant value to view incidents that are not assigned to any of your tenants.

      You can select the Default tenant value in addition to specifying tenant names.

    • Tactics

      Available MITRE tactics for incident response.

    • Response statuses

      Show only incidents with the selected statuses of corresponding responses.

  3. Click Save to apply the created filter. Click Clear to discard the created filter.

Only incidents that meet the selected parameters of the filter are shown in the incident list after the filter is applied.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.