Create and define filter groups in Security Operations Create and use filter groups to locate records from any table on your instance. For example, you can create a group of all computers by the same manufacturer. You can also filter configuration items (CIs) that have similar vulnerabilities or that fall within a particular subnet IP address range. Before you beginRole required: sn_sec_cmn.write About this task Filter groups can contain dynamically updated records, a series of static records that are not filtered using conditions, or a combination of dynamically updated and static records. Some filter groups are included in the base system, for example, CI exclusions. Procedure Navigate to Security Operations > Groups > Filter Groups. Click New. Fill in the fields on the form, as appropriate. Field Description Name The name of the filter group. Active Box to activate the group. Description Description for the filter group. Network IP Address The network IP address that contains the IP addresses of the CIs you want to add to the group. This field appears only if you selected Configuration Item [cmdb_ci] or a table that extends configuration item in the Table field. Subnet Mask The subnet that contains the IP addresses of the CIs you want to add to the group,for example, 255.255.255.0. This field appears only if you selected Configuration Item [cmdb_ci] or a table that extends configuration item in the Table field. Table The table to be filtered on. Condition Use the condition builder to define the criteria to be filtered. Right-click the form header and select Save. An Advanced Conditions tab appears. More tabs appear depending on the type of table you specified in the Table field, as follows: Table Tabs Displayed Configuration Item [cmdb_ci] or a table that extends the configuration item table Manually Added CIs and Matching CIs Task [task] or a table that extends the task table Manually Added Tasks and Matching Tasks A table not related to a CI or task Manually Added Record To define more conditions for your filter group: Click Advanced Conditions. Insert a new row into the Additional Filter Group Conditions embedded list to select other prebuilt filter groups that you want to combine with the filter group being updated. If you want the selected filter group to filter records based on a reference field, a mapped field is automatically selected when the current record is saved. Note: The Mapped field value cannot be edited from the Additional Filter Group Conditions embedded list. To change the field, click the information icon to open the record. Click Update. To manually add more CIs or tasks to the filter group: Click the Manually Added CIs or Manually Added Tasks tab. Click Edit. Select the CIs or tasks you want to add. Click Save. To view the CIs or tasks that match your selection criteria: Click the Matching CIs or Matching Tasks tab. If you changed the criteria, refresh the list by right-clicking in the form header and selecting Refresh List.
Create and define filter groups in Security Operations Create and use filter groups to locate records from any table on your instance. For example, you can create a group of all computers by the same manufacturer. You can also filter configuration items (CIs) that have similar vulnerabilities or that fall within a particular subnet IP address range. Before you beginRole required: sn_sec_cmn.write About this task Filter groups can contain dynamically updated records, a series of static records that are not filtered using conditions, or a combination of dynamically updated and static records. Some filter groups are included in the base system, for example, CI exclusions. Procedure Navigate to Security Operations > Groups > Filter Groups. Click New. Fill in the fields on the form, as appropriate. Field Description Name The name of the filter group. Active Box to activate the group. Description Description for the filter group. Network IP Address The network IP address that contains the IP addresses of the CIs you want to add to the group. This field appears only if you selected Configuration Item [cmdb_ci] or a table that extends configuration item in the Table field. Subnet Mask The subnet that contains the IP addresses of the CIs you want to add to the group,for example, 255.255.255.0. This field appears only if you selected Configuration Item [cmdb_ci] or a table that extends configuration item in the Table field. Table The table to be filtered on. Condition Use the condition builder to define the criteria to be filtered. Right-click the form header and select Save. An Advanced Conditions tab appears. More tabs appear depending on the type of table you specified in the Table field, as follows: Table Tabs Displayed Configuration Item [cmdb_ci] or a table that extends the configuration item table Manually Added CIs and Matching CIs Task [task] or a table that extends the task table Manually Added Tasks and Matching Tasks A table not related to a CI or task Manually Added Record To define more conditions for your filter group: Click Advanced Conditions. Insert a new row into the Additional Filter Group Conditions embedded list to select other prebuilt filter groups that you want to combine with the filter group being updated. If you want the selected filter group to filter records based on a reference field, a mapped field is automatically selected when the current record is saved. Note: The Mapped field value cannot be edited from the Additional Filter Group Conditions embedded list. To change the field, click the information icon to open the record. Click Update. To manually add more CIs or tasks to the filter group: Click the Manually Added CIs or Manually Added Tasks tab. Click Edit. Select the CIs or tasks you want to add. Click Save. To view the CIs or tasks that match your selection criteria: Click the Matching CIs or Matching Tasks tab. If you changed the criteria, refresh the list by right-clicking in the form header and selecting Refresh List.
