Filtering Alerts and Events Using the Web UI

1. In the Web UI, choose Alerts > Filters.

   

2. Click the Add Filter button near the upper right corner of the screen.

   

3. Enter the filter information as indicated in the following table.

   Field	Description
   Filter Name	Name of the filter. The filter name is case-sensitive.
   Victim IP and Mask	The address of the impacted device.
   Attacker IP and Mask	The address from which malware was downloaded or pushed.
   Start date & end date	Click in the field to see a calender for choosing the month, date, and year the filter starts and ends.

4. To add the event filter, click Save.

   The event filter displays. Previously defined filters are displayed on the Alerts and Summaries tabs.

The list displays the events that match the defined filter.

1. Depending on the filter, click Alerts or Summaries.

2. In the drop-down list, choose User Filter.

3. Select the name of the user filter.

1. In the Filters page, select the checkbox for each filter you want to delete.

2. Click Remove Selected Filters.

1. Open the Alerts tab.

2. Expand the Filters group by clicking on the Filters icon in the upper left corner.

3. In the drop-down list, choose User Filters.

4. From the expanded Filters group, select any combination of alert attributes to refine your filter:

5. Click Apply to apply the refined filter.