Filter Escalations List

With filtering, you can customize the escalations list according to the selected criteria. The Filter icon is located above the upper-right corner of the Escalations table. 

After the Filter icon is selected, the Filters pop-up window appears.

Escalations list can be filtered by the following criteria:

• Service—shows escalations related to the selected service.
• Severity—shows escalations with the selected severity status (Critical, High, Medium, Low, or Informational) assigned.
• Status—shows escalations with the selected status (Open, In Progress, Closed)
• Acknowledged—shows escalations filtered by acknowledgement status (All, Yes, or No).
• Assignment—shows escalations that are either Unassigned or assigned to a particular user.
• Time created—shows escalations filtered by creation time (All, Last 24 Hours, or Last 7 Days). 
• Star Value—shows escalations based on their assigned priority or importance rating.
• Feedback Tags—shows escalations filtered by specific feedback tags (False Positive, True Positive, Normal Activity, Suppression Candidate, Other, or No Tags).
• Related to a Threat Hunt—shows escalations linked to a specific threat hunt investigation (All, Yes, or No). 

To filter escalations list

1. Select the Filter icon.
2. In the Filters pop-up window, select the checkboxes near the needed options. You can select several filters at a time.
3. Select the Apply button.
4. To clear all filters, select the Clear Filters button that is now located next to the Search field.

• Note: By default, the Escalations table excludes closed escalations. Select the Clear Filters button to display all escalations.