Data Loss Prevention

 View Only
Expand all | Collapse all

Modifying the default filters for built-in reports (example Report ID 6)

  • 1.  Modifying the default filters for built-in reports (example Report ID 6)

    Posted Jan 20, 2015 11:39 AM

    A while back I made the mistake of modifying the the "New" status under Incident | Data Attributes | Status | Status Values | New. What I did not realize at the time was that the Network/Endpoint/Discovery reports titled "Incident - New" used this as a filter, and when I modified the "new" status the filters changed to "all".

    Now every time the default report is used no incidents are displayed, despite the filter being "all". I have to change the filter to "new" and hit apply for any incidents to show.

    These reports cannot be deleted through the interface, nor do I get the option to "Save" the report when using the administrator account.

     



  • 2.  RE: Modifying the default filters for built-in reports (example Report ID 6)

    Posted Feb 03, 2015 07:26 AM

    Dear Michel,

    You can delete the incident either through the console itself it you have admin role or you can perform SQL queries to do the same which is bit risky. Check you role and requirment and get access to do activities