To prioritize and quickly take action on groups, use the built-in filters:
From the device type filter, select:
|Groups with event status||Choose the event status or statuses that you want to view. Filtering is disabled when you do not select any filters. |
Groups that have at least one event of the selected event status type are displayed. For more information, see event status.
|Groups with event severity||Choose the event severity or severities that you want to view. Filtering is disabled when you do not select any filters. |
Groups that have at least one event with the selected event severity are displayed. For more information, see event severity.
From the time filter action menu, select one of the predefined time periods or create a custom time filter.
Predefined Time Periods: Choose a time period from the list to display groups with events that have occurred during the selected time period.
Custom Time Periods: Create a custom time period for which to filter groups.
To create a custom time period
Only the latest five custom filters that you created are displayed in the Custom Time Periods list.
Custom time periods that you create are not available after you log off the TrueSight console.
The event status and event severity filters work in conjunction and groups that meet both filter criteria are displayed.
For example, if you select Open and Assigned from the event status filter and select Critical and Major from the event severity filter, the result displays the list of groups that have at least one open or assigned event with a critical or major severity.