In the Manage Default Meta Keys dialog, analysts can specify the meta keys to be displayed during navigation for a specific service. This can help you find the desired data more quickly and prevents the loading of meta that is not of interest.
When you modify the default meta keys for a non-indexed meta key, you cannot set the key to Open. If you change the default view for a group of meta keys to Open and some of the meta keys are non-indexed, the non-indexed meta keys revert to Auto. As a result, the meta key is automatically loaded only if it is indexed, and non-indexed meta keys are Closed until opened manually.
To access this dialog:
- In the Security Analytics menu, select Investigation > Navigate.
The Investigate dialog is displayed.
- To choose a service, do one of the following:
- Double-click a service.
- Select a service and click Navigate.
The Navigate view for the selected service is displayed.
- In the Navigate View toolbar, select Meta > Manage Default Meta Keys.
The Manage Default Meta Keys dialog is displayed.
Related procedures are available in Manage and Apply Default Meta Keys in an Investigation.
The Manage Default Meta Keys dialog has a grid, toolbar, Close button, and Apply button.
In the grid, you can view, sort, and manage default meta keys. If you click and drag meta keys, you can rearrange their order. The following table provides descriptions of the grid features.
|Meta Key||This column displays the meta keys available for the service.|
|View||This column displays the type of view assigned to each meta key. By clicking on the view in each row, you can assign the meta key a different default view. There are four views: |
Toolbar and Buttons
The following table describes the toolbar and button features.