Filtering incidents in MDR Web Console

To view specific incidents, you can create and apply filters to the incident list.

To create a filter for the incident list:

1. In MDR Web Console, click the Incidents menu item.

   The incident list opens.

2. Click the funnel icon located above the incident list.

   The Filter block appears.

   Parameters available for filtering are:

   • Created

     Time period for incident creation.

   • Updated

     Time period for incident update.

   • Priority

     Incident priority. Available priorities are Low, Medium, and High.

   • Status

     Incident status.

   • Resolution

     Resolution for incident.

   • Assets

     Available assets.

   • Tenant

     Available tenant names.

     You can select the Default tenant value to view incidents that are not assigned to any of your tenants.

     You can select the Default tenant value in addition to specifying tenant names.

   • Tactics

     Available MITRE tactics for incident response.

   • Response statuses

     Show only incidents with the selected statuses of corresponding responses.

3. Click Save to apply the created filter. Click Clear to discard the created filter.

Only incidents that meet the selected parameters of the filter are shown in the incident list after the filter is applied.