Filtering ActOns

By Date

By default, ActOns are displayed in the feed for the last 24 hours. However, you can modify the ActOns feed by selecting the following options:

• Created: Shows the ActOns that have created new with the respective time period.
• Updated: Shows the ActOns that have updated some status in their comments with the respective time period.
  • Last 12 Hours: ActOns aggregated over the last 12 hours are displayed.
  • Last 7 days: ActOns aggregated over the last 7 days are displayed.
  • Last 1 month: ActOns aggregated over the last 1 month are displayed.
  • Last 3 months: ActOns aggregated over the last 3 months are displayed.
  • Custom: Click the date field to display the Custom Date Range dialog where you can define a specific date period – start date, and end date to show the ActOns within that time period.

Quick Filters

Quick filters are enabled to filter the ActOns quickly. Use the following options to filter the ActOns in the ActOn's feed.

• I am the owner: Displays the ActOns where you have assigned as the owner.
• Unassigned: Displays the ActOns where no one is assigned a owner or a participant to the ActOn.
• Security: shows the ActOns relevant to Security threats.
• DigitalOps: show the ActOns relevant to DigitalOps.

By Functions

Select multiple functions from the drop-down menu, and relevant ActOns will appear on the listing page that are linked to the selected functions.

By Priority

Filters the ActOns by choosing the different priority levels from P0 to P4 in the left pane of the ActOn's feed.

Priority	Response SLA	Resolution SLA
P0	15 min	4 hrs
P1	2 hrs	1 day
P2	4 hrs	2 days 12 hrs
P3	1 day	5 days

By Status

Filter out the ActOns based on the different statuses available on the platform.

By Stage

Filter the ActOns by stage(s), such as Identification, Investigation, Clarification, Mitigation, Incident, Remediation, and Resolution. 

More Filters

You can filter out the ActOns by selecting any one or more filters from the below list:

More filters include:

• Organization: filters the ActOns relevant to the organization(s) you have selected. This option is not visible to organization or tenant users.
• Tenant: filters the ActOns relevant to the tenant(s) you have selected.
• Class: filters the ActOns relevant to the specific class.
• Sub-class: filters the ActOns relevant to the specific class and its respective sub-class.
• Category: filters the ActOns relevant to the specific category.
• Sub-category: filters the ActOns relevant to the specific category and its respective sub-category.
• Signal Source: filters the ActOns relevant to the specific source, mainly classified as security, CMDB and ITSM.
• Functions: filters the ActOns relevant to the specific function(s).
• Tags: Filters the ActOns by specific tag(s). 

• Team and Owner Filters:

  • Organization: Filters the teams and owners relevant to the selected organization. This field is visible only at the domain level.
  • Tenant: Filters the teams and owners associated with the selected tenant. If both the organization and tenant are selected, the tenant drop-down will display teams created within that tenant. This field is visible only at the organization level.
  • Team: Filters the ActOns assigned to the selected team.
  • Owner: Filters the ActOns assigned to the selected owner.

By Escalation triggered

The escalations-triggered filter shows you the ActOns on which some kinds of escalations have taken place since their creation. With this filter, you can filter the ActOns that belong to either domains or organizations or tenants, which may or may not have escalations on their ActOns.