The incidents list is a table displaying all data loss prevention or discovery incidents. By default, incidents are sorted by time, but the table can be sorted
by any of its columns (ascending or descending). You can also group by and filter by columns.
To filter incidents by columns in the incident list:
Steps
- Click the down arrow button in a column header to see the sort and filter options available. These vary based on the column contents.
- Select Filter by this Column to open a dialog box with options for filtering the column. For example:
- To filter the Source column, select one or more users, computers, or domains to include or exclude.
- To filter the Channel column, select one or more channels
- Click OK to apply the filter.
- The incident table is updated to show only rows that match the selected filter.
- An icon appears next to the column header to show that a filter has been applied to that column.
Next steps
To clear a column filter, click the filter icon in the column header and select Clear Column’s Filter.