AlienVault® USM Central™

Searching Configuration Issues

USM Central includes several filters displayed by default. These filters enable you to search for your items of interest. You can either filter your search, or enter what you are looking for in the search field, which is in the lower-left corner of the page.

Using Filters to Search for Configuration Issues

USM Central allows you to configure more filters and change which filters are displayed by clicking the Filter Configuration icon ().

The management of filters is similar to that for alarms. See Managing Filters for more information.

Filters displayed in the main Configuration Issues page
Filter Name Meaning
Created during Filter configuration issues identified in the last hour, last 24 hours, last 7 days, or last 30 days. You can also configure your own period of time by clicking the Custom Range icon ()
Active/Inactive Filter the active or inactive configuration issues
Deployment Filter configuration issues by the name of the deployment on which the configuration issue has been identified
Category Filter configuration issues by category of the configuration issue. Issues with similar impacts have the same category
Subcategory Filter configuration issues by sub-category of the configuration issue. The sub-category explains the particular detail of the issue
Severity Filter configuration issues by severity of the issue. Values are Low, Medium, or High
Asset Filter configuration issues by asset associated with the configuration issue

The displayed number close to each filter between brackets indicates the number of items that matches the filter. You can also use the filter controls to provide a method of organizing your search and filtered results. The icons below each filter consist of the following

Icons below filters
Icon Meaning
Toggle the ability to select multiple values as an OR statement
You can view and toggle between the currently filtered item, and other filtered items. You do not have to reset the search
Toggle values with (0) matches
Sort the information alphabetically
Sort the filters by number of items that matches them
Reset Resets to the default values

Across the top, you can see any filters you have applied. Remove filters by clicking the Close icon () next to the filter. Or clear all filters by clicking the Clear All Filters link.

Note: When applying filters, the search uses the logical AND operator if the used filters are different. However, when the filter is of the same type, the search uses the logical OR.

To search configuration issues using a filter

  1. Go to Configuration Issues.
  2. Click on a filter.
  3. The result of your search displays with the configuration issues identified.

Searching Configuration Issues by Using the Search Field

To search Configuration Issues using the search field

  1. Go to Configuration Issues.
  2. Enter your query in the search field.
  3. If you want to search for an exact phrase having two or more words, you need to put quotation marks around the words in the phrase. This includes email addresses (for example, "").

    Note: Keep in mind that wildcard characters are considered as literals.

  4. Click the icon.