Skip to main content

Search, filter, and sort alert and incident data

The search and filter tools let you focus on the type of data you're looking for, or find specific items by searching for their specific attributes.

Searching and filtering are combined to help you investigate and locate incidents and alerts faster. Moogsoft Cloud combines text-based searches and non-textual searches, so you can even filter by tags and location to return meaningful data results. User-defined tags and location can help identify useful correlations, but they can also be used to help you investigate incidents or alerts faster. This means you can search using keywords, filter the results, and save any query for later reuse at the click of a button. Note that you can use filters in combination to narrow down your results.

You can build incident views with custom filters, column ordering, sorting, and visibility, and save and share those views with other users and groups. See Create and share incident views for more information.

Filter

You can filter your data in the Incidents and Alerts views by building a grid filter.

  1. If you want to filter all data without search constraints, click the X at the right of the search box to clear any current searches.

    ClearSearch.png

    Note that you can filter and sort search results.

  2. Click the Filters tab at the far right of the search bar.

    IncidentsGridClickFiltersTab.png

    Alternatively, you can access the filter for each column by clicking the filter icon under the column header.

    AlertGridFilterColumn.png
  3. In the Filter panel, click the name of the column to filter and add the filter terms.

    AlertGridBuildFilter.png

    To filter using dates and times, you can either type out the value or click the calendar icon to open the date and time selector.

    For incidents, you can also use a time selector in the upper right of the page to specify the time period displayed. If you combine the time selector with a date and time filter, the most restrictive combination of the two is applied.

    AlertGridDateTimeSelector.png

    For columns that contain predetermined possible values, select the values to display.

    BuildIncidentGridFilterList.png

For information on filtering using the API, refer to the API documentation.

Filter for blank or not blank values

In addition to filtering for specific column values, you select Blank or Not blank to filter for the presence or absence of values in the column. Note that an empty space counts as a "blank" value.

Any column can be filtered for blank or not blank values except for fields like severity and status (which always have values), and tags. Support for filtering tags this way is planned for a future release.

To filter for incidents with unset priority, simply uncheck all of the available values for the column.

Save a filtered view

For information on saving incident filters, see Create and share incident views.

Grid columns

You can add, remove, and reorder grid columns to use for filtering.

Modify columns

Click Columns at the top of the page to access the following column options:

  • Add a column

    In the Columns dialog, click Add Column and select a column to add to the view by clicking Add Column (+ icon) to the right of the column name. The column is added to the grid display.

    If the column you want to add isn't in the list of recent columns, use the search box at the top of the dialog to locate it.

  • Pin (or unpin) a column

    Pinning moves the column to the first position in the grid (or within the pinned group, if other columns are already pinned), "freezes" it in place, and allows the columns to the right of it to continue to scroll.

    To pin a column, click the pin icon to the right of the column. This pins the column and all columns to the left of it.

    If the column is already pinned, then clicking the pin icon unpins it.

  • Auto-size a column

    To make a column as wide as the widest item in the column, click Auto-size this Column ( ↔ icon ) to the right of the column name.

  • Remove a column

    Click Remove Column (trashcan icon) to the right of the column name.

  • Auto-size all columns

    To change the width of all the columns to the width of the widest item in each column, click Auto-size All at the bottom of the dialog.

SelectColumns.png

Reorder columns by dragging the column headers to new locations.

AlertGridReorderColumns.png

Sort

You can display alert and incident data using both single- and multi-column sorts.

Click the heading of the column you want to sort. By default, the arrow points up, indicating an ascending sort. Click the heading again for a descending sort.

DataGridSort.png

To sort by additional columns, press and hold the Shift key, then click additional column headings. The first column click is the primary sort, second is the secondary sort, and so on. Column headings indicate the sort level and the direction.

SortOrder.png

To clear a multi-column sort, click a column heading without pressing the Shift key.

Tips

  • Make sure you are using the latest data: use automatic page refreshing to update incidents and alerts as often as you need.

    • Choose the auto refresh interval from the list to enable auto refreshing.

    • Manually click the refresh button to refresh on demand.

  • Click the Hide filter bar icon to hide the filter row.

    When the icon is blue, the filter row is hidden.

    ShowHideFilterBar.png
  • To reload the default filter, refresh your browser tab.

  • Click the Actions menu to access copy and paste options as well as shortcuts to change incident or alert status.

    You can also right-click within the grid to access the Actions menu.

    AlertGridGridActionsMenu.png