Documentation forSecurity Event Manager

Example filter: Create a filter for all activity in a connector profile

  1. Log in to the SEM Console.
  2. On the toolbar, click Live Events.
  3. To create a filter at a group level in the Filter Values pane, for example, the Overview group, move the mouse pointer over a group heading to expose the vertical ellipsis, and click Add New Filter.

    Or:

    To create a filter at the root level, click the add icon, and then select Add New Filter.

  4. Enter a descriptive name for your new filter in the Name field on the right.
  5. In the first column under Filter Values on the left, expand Event Groups, and select Any Alert.
  6. Drag DetectionIP from the second column on the left into the filter builder.

    When you drag a value into the filter builder, the correct drop location is illuminated with a blue line.

  7. In the same way, expand the Connector Profiles group, select your profile, and drag it into the filter value drop location.

  8. Click Save.