Filtering incidents in MDR Web Console
August 7, 2024
ID 198732
To view specific incidents, you can create and apply filters to the incident list.
To create a filter for the incident list:
- In MDR Web Console, click the Incidents menu item.
The incident list opens.
- Click the funnel icon located above the incident list.
The Filter block appears.
Parameters available for filtering are:
- Created
Time period for incident creation.
- Updated
Time period for incident update.
- Priority
Incident priority. Available priorities are Low, Medium, and High.
- Status
Incident status.
- Resolution
Resolution for incident.
- Assets
Available assets.
- Tenant
Available tenant names.
You can select the Default tenant value to view incidents that are not assigned to any of your tenants.
You can select the Default tenant value in addition to specifying tenant names.
- Tactics
Available MITRE tactics for incident response.
- Response statuses
Show only incidents with the selected statuses of corresponding responses.
- Created
- Click Save to apply the created filter. Click Clear to discard the created filter.
Only incidents that meet the selected parameters of the filter are shown in the incident list after the filter is applied.