Applying Basic Filters

Procedure

1. Go to Detections → All Detections.
2. Specify the information to filter.
   The following table explains the basic search filters for querying detections.

   Note Search filters do not accept wildcards. Deep Discovery Web Inspector uses fuzzy logic to match search criteria to detection data.

   Filter	Description
   Risk level	Select All, High and Medium, High, Medium, Low, Potential Threat, or User Defined. The default risk level is High and Medium. For details about risk levels, see Understanding Risk Levels.
   Action	Select All, Monitor, Block, Warning, or Analyzing.
   User Name	Search for a specific user name by specifying a user name or the logged on user's host IP address. To display results filtered by User Name, click on the Search () icon or press Enter to filter the results. Note Your search parameter might be the logged on user if Active Directory services are configured or it might be the client IP address. This is because the user is displayed if Deep Discovery Web Inspector can identify the logged on user for the detection. Otherwise the IP address is displayed for User Name.
   Period	Select a predefined time range or specify a custom range. If specifying a custom range, specify a starting and ending time for the range.

   When applying Risk level, Action, and Period basic filters, Deep Discovery Web Inspector dynamically displays the filtered results.
   All detections matching the search criteria appear.
3. Click on Clear all before starting a new filter search.