User Guide
Also available as:
PDF

Managing Your Filters

When you create a filter anywhere in the Metron dashboard, the filter conditions display in a green oval under the search text entry box.

Figure 3.5. Query Search Text Entry Box


You can perform several actions on the filter. Hover over the green oval to display the actions you can perform on the filter. If you click on the Actions menu in the filter bar, it will open a menu that allows you manipulate all of the filters.

Enable

Toggles between disabling and enabling the filter without removing it.

Pin

Pinned filters persist across Kibana tabs.

Toggle

Toggles between inclusion and exclusion. If a filter is set to inclusion, only elements that match the filter are displayed. If a filter is set to exclusion, the dashboard will display elements that don't match the filter. Exclusion filters display in red.

Remove

Removes the filter entirely.

Custom

Enables you to customize the JSON representation of the filter and specify an alias to use for the filter name. For example, you can use JSON filter representation to implement predicate logic, with should for OR, must for AND, and must_not for NOT.

Global

Applies any of the filter actions to all the filters currently in place.