Landing page filter configuration

You can add new filters or modify existing filters that appear in the Security Analyst Workspace.

The Security Analyst Workspace has primary and secondary filters that allow you to filter the list of security incidents so you can quickly find the security incidents you want to analyze. Fore more information, see Manage security threats using the Security Analyst Workspace.

Create a new filter

1. Navigate to Security Incidents > Analyst Workspace Setup (New UI) > Landing Page Filter Configuration.
2. Click New.
3. Enter a title for the filter, specify the filter condition and click Submit to return to the previous page.

   You will see the newly added filter listed on the page.

4. Add a tag for this filter to indicate whether this is a primary or secondary filter. The following tags are available:
   • SN_SI_Primary
   • SN_SI_Secondary

Edit existing filters

You can also do the following:

• Modify existing filters: Click the Title of an existing filter. Modify the title and the filter condition and click Update.
• Modify tags: Select a filter and click the Tag column in the Landing Page Filter Configuration. You can delete the existing tag or add a new tag for the filter.