Search security incidents

You can find information quickly in an instance using the search icon in the screen header. Zing is the text indexing and search engine that performs all text searches in your instance.

Before you begin

Role required: sn_si.read or higher

Procedure

  1. Click the search icon (search) in the upper right-hand corner of the screen.
  2. Type in the criteria you want to search by, and press Enter.
    The search criteria you entered will present any matching short description text, CIs, IP addresses, or URLs in your security incidents, security incident response tasks, or security requests. If you have the Vulnerability Response or Threat Intelligence plugins activated, the search results will include vulnerabilities, vulnerable items, vulnerable entries, observables, IoCs, and attack mode/methods.