Learn more about managing and filtering page results in the Cortex XSIAM management console.
Most pages in Cortex XSIAM present data in table format and provide controls to help you manage and filter the results. If additional views or actions are available for a specific value, you can pivot (right-click) from the value in the table. For example, you can view the incident details or pivot to the Causality View for an alert or you can pivot to the results for a query.
On most pages, you can also refresh () the content on the page.
Filter Page Results
Learn more about filtering page results to reduce the number of results displayed.
To reduce the number of results, you can filter by any heading and value. When you apply a filter, Cortex XSIAM displays the filter criteria above the results table. You can also filter individual columns for specific values using the icon to the right of the column heading.
Some fields also support additional operators such as =, !=, Contains, not Contains, *, !*.
There are three ways you can filter results:
By column using the filter next to a field heading
By building a filter query for one or more fields using the filter builder
By pivoting from the contents of a cell (show or hide rows containing)