Kaspersky Industrial CyberSecurity for Networks

Selecting events in the events table

March 22, 2024

ID 189743

In the events table, you can select events and incidents to view their information and to work with these events and incidents. When events and incidents are selected, the details area appears in the right part of the web interface window.

To find relevant events and/or incidents, do one of the following:

  • If you want to select one event or incident, select the check box next to this event or incident or use your mouse to select it.
  • If you want to select multiple events and/or incidents, select the check boxes next to the relevant events and/or incidents or select them while holding down the CTRL or SHIFT key. When multiple events and/or incidents are selected, the application checks their status and determines if there are events and/or incidents with the New, In progress or Resolved statuses among those selected.
  • If you want to select all events and incidents that satisfy the current filter and search settings, perform one of the following actions:
    • Select any event or incident in the table and press the key combination CTRL+A.
    • Select the check box in the title of the left-most column of the table.

When multiple events and/or incidents are selected, the details area displays the total number of selected elements. However, embedded elements of collapsed incidents (events and other incidents) are not taken into account.

If you selected all events and incidents that satisfy the current filter and search settings, embedded elements of collapsed incidents are included in the total number of selected elements. The details area displays one of the following values:

  • If 1000 or less events and incidents are selected, the precise number is displayed. In this case, the application checks the statuses of the selected events and incidents just as with other multiple selection methods.
  • If more than 1000 events and incidents are selected, the number 1000+ is displayed. In this case, the application does not check the statuses of the selected events and incidents.

The title of the left-most column of the table shows a check box for the selection of events and incidents. Depending on the number of selected items in the table, the check box can have one of the following states:

  • icon_empty_flag – all events and incidents that satisfy the current filter and search settings were not selected in the table. However, one event/incident or multiple events and/or incidents may be selected in the table by using the check boxes next to the events and incidents or by using the CTRL or SHIFT key.
  • icon_checked_flag – all events and incidents that satisfy the current filter and search settings were selected in the table.
  • icon_empty_flag – all events and incidents that satisfy the current filter and search settings were selected in the table, but then the check boxes for some of them were cleared. This state is also retained if the check boxes were cleared for all events and incidents selected in this way (due to the fact that the number of selected events and incidents may change).

If all events and incidents that satisfy the filter and search settings are selected, the number of selected elements may be automatically changed. For example, this may happen if new events or incidents are registered. It is recommended to configure the filter and search settings in such a way that ensures that only the relevant elements end up in the selection (for example, you can filter events by their IDs before selecting all events and incidents).

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.