Working with quick filters

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 12일
  • 소요 시간: 4분

    • Quick filters are easily accessible filters that are available on, security incidents and response tasks lists.

    시작하기 전에

    Role required: sn_si.admin

    The SIR Workspace provides quick filters feature that allows you to filter the list of security incidents or response tasks with ease.

    You can use quick filters to configure new filters or modify existing filters that appear against these lists. The base system provides the following quick filters for each security incident:
    • Incidents Opened Today
    • Incidents open > 24hrs
    • Open incidents with Priority= Critical
    • Risk >= 80
    • Open Phishing Incidents
    The base system provides the following quick filters for each response task:
    • Tasks open > 24h
    • Open Tasks with Priority = Critical
    주:
    An admin can configure the required list of quick filters according to the organization need.

    프로시저

    1. Navigate to System Definition > Tables.
    2. Search for Quick Filters (sn_si_aw_quick_filters).
      quick filters
    3. Go to Related Links > Show List section.
      The Quick Filters list page is displayed. OOTB, following is the list of quick filters shipped with the application.
      Name Table Value
      Tasks opened Today Security Incident Task [sn_si_task] True
      Incidents opened Today Security Incident [sn_si_incident] True
      Tasks open > 24h Security Incident Response Task [sn_si_task] True
      Incidents open > 24h Security Incident [sn_si_incident] True
      Open Tasks with Priority = Critical Security Incident Response Task [sn_si_incident] True
      Open Incidents with Priority = Critical Security Incident [sn_si_incident] True
      Risk score >= 80 Security Incident [sn_si_incident] True
      Open Phishing Incidents Security Incident [sn_si_incident] True
      주:
      The security admin can go ahead and configure these quick filters. As per the business need, admin can modify the existing value to false and create a new quick filter.
      그림 1. Quick Filters
      Quick filters list view
    4. Click New to create a new filter.
    5. Enter a name for the filter, select the Table, specify the filter condition.
    6. Click Submit to return to the previous list page.
      You will see the newly added filter listed on the page.
      new filter
      주:
      • The quick filter will be applicable only if the Active check box is selected.
      • Within the workspace, any logged in user can personalize the active quick filters which are available in the application. Users can hide or unhide the newly created quick filters. This feature is based on their user preference.
      • If a user has modified the preferences for quick filters and a new quick filter is created after that, then if the quick filter is set to active, it will not apply to the user's preference. The user has to manually change the preferences in the personalized view.
    7. Select any existing filter record to modify the existing quick filters.
    8. Modify the name and filter condition.
    9. Click Update.
      그림 2. Quick filters
      Quick Filters: Tasks opened today