USM Anywhere™

About the No Value Option

Role Availability Read-Only Analyst Manager

The No Value option is a special value available for some filters. Use this value when you want to filter items that do not have the filter property defined or do not match the other defined property values in the filter. You can use the No Value option with other filter criteria and apply this value to an individual filter. (For example, you can use this filter for filtering events without an associated account name.)

Click No Value in the events main page

Note: In the Data Source filter, the value is [AlienVault Generic Data Source]. If you select this value, it means you are searching for events that do not have a specific data source. See About the "Was Fuzzied" Filter for more information.