This topic provides instructions on how to perform a keyword search on name and content for each of the Reporting components. You can perform a keyword search on name and content for each of the Reporting components (Rule/Report/Chart/Alert/List) on the Reporting UI.
The following figure shows the search parameters available in the Reporting Module:
The following are the search parameters available on the Reporting UI:
- Search for entities (rule, report, chart, alert, list).
- Search for the entities based on either the name or content.
In the Reporting Module, you can perform a keyword search based on the name and content (definition). In this context, content implies definition of each of the reporting components. For instance, the value defined in the rule, report, report schedule, chart, and alert panel. You can also prioritize your search by selecting either or all of the components: Rule, Report, Chart, Alert, or List.
For example, to search for the rule name (ExpertRule), you must select Rule, Name, and Content in the filtering options drop-down to view all the rule names that matched the search. You can similarly search for a report, chart, alert, or list definition.
Perform the following steps to search for reporting details from the Manage tab:
In the Security Analytics menu, click Administration > Reports.
The Manage tab is displayed.
- Click and select the appropriate criteria to search.
- In the Search field, enter the text to be searched.
The search drop-down list is displayed:
Search Syntax and Different Types of Search
The following table explains the search syntax and the possible searches that can be performed on the Reporting UI.
Perform one of the following tasks: