You can narrow down your search for correlated data by adding filters to selected alert attribute values to the Alert details task.
What you should know
Procedure
-
In the Alert details task window, click
Search (),
A search field opens.
-
Enter the filter expression in the form:
<Attribute>=<Value>
The string comparisons are case sensitive. If you are not sure how the attribute names are spelled, click and select an attribute from the list. To combine multiple expressions with the
AND
operator, separate them with a semicolon (";"). -
Complete the filter expression and click to apply the filter.
- Click to remove the filter.