Apply quick filters on Security Incidents and Response Tasks lists

Apply the predefined quick filters on Security Incidents and Response Tasks lists to get the desired work items.

Before you begin

Role required: sn_si.analyst

Procedure

1. Navigate to Workspaces > Security Incident Response Workspace.

2. Select the list icon (

1. Select any list item under Security Incidents or Response Tasks.

   The Quick Filter page displays all the currently selected filters with the counts of the number of records matching each filter.

2. Select one or more filters apply on the selected view.

   Note:

   • When you select multiple filters, they are combined using the AND logic.
   • Use the Clear button to clear the filter selection.
   • Select the Edit Quick Filter Selection icon

The Edit Quick Filters page appears with all the selected filters.

1. Select anywhere in the textbox to display the list of all the available filters.

1. Select the required filters.

2. Select Save.

   Selected filters are displayed in the Quick Filters pane. This configuration persists for a security analyst.

Parent Topic:List view in SIR Workspace

Related topics

Personalize a list

Assign Security Incidents

Close multiple security incidents

Assign Response Tasks

Report Phish Email

Working with quick filters

Export Security Incidents or Response Tasks

Manage Shift Handover records