Creating custom views

To create a custom view:

1. Go to Incidents & Events > Event Monitor.
2. Go to an existing view to copy.
3. Add filters that you want to include in the custom view.
   
4. Click the custom view icon in the toolbar.
5. Enter a name for the custom view and assign it to one of the following categories:
   • By Endpoint
   • By Threat
   • System Events
   • Custom View

     

6. In the Privacy field, toggle the custom view visibility.
   • Public: Others can view this custom view displayed in Incidents & Events > Event Monitor > Custom View.
   • Private: Only you can see this custom view displayed in Incidents & Events > Event Monitor > Custom View.
7. Select OK to save the view.
   

   When upgrading from versions prior to 6.2.0, existing custom views will be placed in the Custom View category.

To edit a custom view:

1. If using ADOMs, ensure that you are in the correct ADOM.
2. In the navigation, click the menu icon for the custom view.

   For example, click the menu icon for a custom view in Incidents & Events > Event Monitor > Custom View.

3. In the menu, click one of the following options:

   • Edit: change the name or category of the custom view.

   • Share with Others: change the privacy setting for the custom view.

   • Save: after opening the custom view and changing the filters, save the custom view.

   • Save As: after opening the custom view and changing the filters, save a new custom view.

   • Delete: delete the custom view.