In the Manage Profiles dialog, you can configure, add, delete, import, and export profiles.
To access this dialog:
In the Security Analytics menu, select Investigation > Navigate or Events. Both views provide access to the Manage Profiles dialog.
The Investigate dialog is displayed.
- Select a service, then click Navigate.
In the toolbar, select Profile > Manage Profiles.
The Manage Profiles dialog is displayed.
At fresh installation, OOTB profiles are added for investigation in the Manage Profiles dialog. The OOTB profile groups are prefixed with RSA for identification and can be duplicated but cannot be edited or deleted.
Related procedures are available in Use Investigation Profiles to Encapsulate Custom Views.
The Manage Profiles dialog has two panels. At the bottom of the dialog there is a row of buttons.
The following table describes the buttons.
|Close||Closes the dialog.|
|Cancel||Cancels all changes.|
|Save||Saves all changes.|
|Save and Apply||Saves and applies all changes immediately.|
The Profile panel on the left side of the dialog displays available profiles and allows you to add, delete, import, and export profiles.
The following table describes the fields in the Profile panel.
The Settings panel on the right side of the dialog offers options to configure profiles. It can only be used when one profile is selected.
The following table describes the fields in the Settings panel.
Displays the name of the profile.
|Meta Group|| |
Displays a drop-down menu listing available meta groups.
|Column Group|| |
Displays a drop-down menu listing available column groups. Three groups are available by default:
Defines a limiting query for filtering Investigation results. This query is used when the associated profile is activated and the preQuery applies to any queries used in the Investigation Navigate and Events views. This is an example of a preQuery: