Sorting events

You can sort events and incidents displayed in the Events section of the application web interface. You can sort by the values of any column except the Description column.

By default, table rows are sorted by the Last seen column in descending order of the dates and times when events last occurred. If the default sorting scheme is changed, the application stops updating events in the table.

To sort events and incidents:

1. In the Events section, click the header of the column by which you want to sort.
2. When sorting events by the Destination or Source column, in the drop-down list of the column header, select the address of the destination or source by which you want to sort.

   Depending on the values selected for display in these columns, you can select one of the following options:

   • IP address
   • Port number
   • MAC address
   • VLAN ID
   • Application-level address
3. If you need to sort the table based on multiple columns, press the SHIFT key and hold it down while clicking the headers of the columns by which you want to sort.
4. If table updates are enabled, in the opened window confirm that you agree to suspend table updates.

The table will be sorted by the selected column. When sorting by multiple columns, the rows of the table are sorted according to the sequence of column selection. Next to the headers of columns used for sorting, you will see icons showing the current sorting order: in ascending order or descending order of values.