Table of Contents
Advertisement
Rule and Report Groups
Click Delete Group.
Step 3
The Delete Report Group dialog box appears listing the reports in the group to delete. You are prompted
to verify deletion.
Click Yes.
Step 4
The report group no longer appears in the report group dropdown lists on the Report and Query pages.
Display Incidents Related to a Rule Group
To display incidents that occur from the firing of rules in a specific rule group, follow these steps:
Step 1
Navigate to the Incidents page.
Step 2
Select the rule group in the dropdown filter above the Matched Rules column, as shown in
The Incidents page will display only those incidents that occurred from rules firing in the selected rule
group.
Figure 21-16
User Guide for Cisco Security MARS Local Controller
21-32
Rule Group on Incidents Page
Chapter 21
Rules
Figure
21-16.
78-17020-01
Advertisement
Table of Contents
Troubleshooting
