Query profiles allow you to set up custom views in the Navigate view, Events view, and Legacy Events view based on a meta group, column group, and limiting query (see Use Query Profiles to Encapsulate Common Areas for Investigation). Built-in profiles are available when you first log in; the names begin with the RSA prefix and are grouped under Default Profiles. You cannot edit or delete built-in profiles.
You can manage built-in profiles and custom profiles in the Manage Profiles dialog, the Create Query Profile dialog and the Query Profile Details dialog.
- The Manage Profiles dialog is for the Navigate view, the Legacy Events view (Version 11.4) , and the Events view (Version 11.3 and earlier). The Manage Profiles dialog has features that are not yet available in the Query Profile dialog: select a meta group for the profile, import and export profiles, copy and edit profiles, and organize profiles into profile groups. To access this dialog, select Profile > Manage Profiles in the Navigate or Legacy Events view toolbar.
- The Create Query Profile dialog is for the 11.4 Events view. To access this dialog, select Query Profiles > New Query Profile in the Events view toolbar.
- The Query Profile Details dialog is for the 11.4 Events view. To access this dialog, select Query Profiles in the Events view toolbar, then click the edit icon () next to a custom profile name.
Quick Look - Query Profile Menu, Create Query Profile Dialog, and Query Profile Details Dialog
This section introduces the Query Profile Menu, Query Profile dialog, and the Query Profile Details dialog. The following figure is an example of the Query Profiles menu and the table describes the options. The example on the left has built-in profile highlighted so that the information icon is visible. The example on the right has a custom profile highlighted so that the edit icon is visible.
The Create Query Profile dialog, shown in the figure on the left, allows you to define a custom profile. The figure on the right illustrates the Query Profile Details dialog, in which you can edit a custom profile. The table describes the fields and options in the dialogs.
Quick Look - Manage Profiles Dialog
This is an example of the Manage Profiles dialog showing several profile groups.
The Profile panel on the left side of the dialog displays available profiles and allows you to add, delete, import, and export profiles. The following table describes the fields in the Profile panel.
The Settings panel on the right side of the dialog offers options to configure profiles. It can only be used when one profile is selected. The following table describes the fields in the Settings panel.
The following table describes the buttons.