Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
How Do I... > Filter incidents?
Filter incidents?
Administrator Help | TRITON AP-DATA | Version 8.3.x
You can filter incidents in a report by editing report filters or applying column filters.
Editing report filters
To change the filters that are applied to a report, open the report and just below the toolbar, select Manage Report > Edit Filter.
1.
Select the filters to apply to the report. When you select a filter to apply, options appear in the Filter Properties pane.
2.
Enable the desired filters, and then specify the filter properties. For example, if you select the Action filter, indicate which actions you want to include in the report. If you select Channel, select which channels to include.
3.
Click Run when you're done.
4.
To save the report for later use, select Manage Report > Save As.
Applying column filters
The incidents list is a table displaying all data loss prevention or discovery incidents. By default, incidents are sorted by their event time, but you can sort them (ascending or descending) by any of the columns in the table. You can also group by and filter by columns.
To filter incidents by columns in the incident list:
1.
Click the down arrow button in a column header. A drop menu with 5 options appears. Different columns display different options.
2.
Select Filter by column. A pop-up box appears. You can filter the column according to specific words or according to excluded words.
3.
Select one of the following options in the Must field:
Be equal to - Enter a specific word in the text field that you want included in the column and click OK.
Be empty - Enter a specific word in the text field that you want excluded in the column and click OK.
The results are displayed in the column with or without the specific words in the column.
* Note: When a column is filtered, the header arrow turns blue.
4.
To clear a column filter, click the down arrow button in a column header and select Clear Column's Filter.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
How Do I... > Filter incidents?
Copyright 2016 Forcepoint LLC. All rights reserved.