Documentation forSecurity Event Manager

Create and manage tags

Beginning with the 2023.2 release, you can create and view tags from the Tag management window.

Tags allow you to quickly identify specific user activity in your deployment. For example, if you are interested in monitoring a specific event in your deployment, you can create a new rule with a tag to display the color-coded tag notification on queries matching your defined criteria. You can also apply multiple tags to a single rule or keyword.

SEM includes pre-defined tag categories and tags that you can apply to a rule. You can also create new tags and associate those tags with a tag category. Tags that you create can only be used for saved search queries and cannot be applied to a rule.

To access the Tag management window, log in as an administrator and click Configure > Tag management in the toolbar. Below is an example of the Tag management window.

Using the Tag management window, you can:

Sort the tag list by category

Click the Name drop-down menu in the toolbar and select Category.

sorts the list by name in ascending order (A–Z).

sorts the list by name in descending order (Z–A).

The default category is Name.

Filter tags by category

In the Refine Results column, maximize the Tag category menu and select a filter. For example, select Authentication.

All tags associated with the Authentication category display in the window.

Click to expand or collapse the Refine Results categories. Click to hide or to display the column.

Filter tags associated with a query

In the Refine Results column, maximize the Applied to menu and select Queries.

All tags applied to a query display in the Tag management window.

If you select Queries and a tag category such as Change Management, all Change Management tags applied to a query display in the Tag management window.

Filter tags not associated with a query

In the Refine Results column, select Nothing.

All tags not applied to a query display in the Tag management window.

Search for a tag

Enter a tag name in the Search field and then click the magnifying glass icon or press Enter. For example, search for a tag labeled User Changes.

Click X in the Search field to clear the search.

The targeted tag displays in the Tag management window with the number of applied queries.

Add a tag

All categories are color coded and inherit their color from the assigned category.

  1. Click Add tag.

  2. In the Tag name field, enter a name for your tag. For example:

  3. Click the Category drop-down menu and select a category for this tag.

  4. Click Create.

    The new tag displays in the Tag management list with a list of queries that include this tag.

    A confirmation message displays in the Tag management window.

Delete a tag

  1. Select the tag you want to delete.

  2. Click Delete in the toolbar.

  3. Click Delete to continue.

    The tag is removed from the Manage tag list and all areas of the SEM Console.

    A confirmation message displays in the Tag management window.