Filtering and searching alerts by categories of objects detected

You can filter alerts and search the alerts table for specific alerts based on the Detected criterion, which indicates one or multiple categories of the object detected in the event. For example, if you want the table to display alerts about files infected by a specific virus, you can set a filter based on the name of this virus.

To filter or search alerts by category of the detected object:

1. Select the Alerts section in the window of the application web interface.

   This opens the table of alerts.

2. Click the Detected link to open the filter configuration window.
3. In the drop-down list, select one of the following alert filtering operators:
   • Contain
   • Not contain
4. In the entry field, type the name of a category (for example, Trojan) or several characters from the name of a category.
5. To add a filter condition using a different criterion, click and specify the filter condition.
6. Click Apply.

The table of alerts displays only alerts matching the filter criteria you have set.

See also Filtering, sorting, and searching alerts Filtering alerts by VIP status Filtering and searching alerts by time Filtering alerts by level of importance Filtering and searching alerts by obtained information Filtering and searching alerts by source address Filtering and searching alerts by destination address Filtering and searching alerts by server name Filtering and searching alerts by technology name Filtering and searching alerts by the status of their processing by the user Sorting alerts in the table Quickly creating an alert filter Clearing an alert filter

Page top