💾Saved Filters
Last updated
Last updated
The Identity Intelligence Users page includes a wide variety of filters, whether in Basic filter mode or Advanced Query Mode using the KQL query language. Often a specific data set is needed repeatedly as you work through a project with your team or for long term monitoring of specific users/issues, and it can be cumbersome to continuously re-apply the same set of filters or rebuild the same advanced queries over and over again to get the data you need.
To make it easier to quickly access sets of filters that you are frequently referencing, Identity Intelligence allows you to create Saved Filters. These Saved Filters can also be modified and deleted as needed.
NOTE: ALL users in the console can see and utilize ALL existing saved filters. Identity Intelligence users with the Help Desk role and full Admin role can create, update, and delete ANY filters. There are also no user permissions associated with individual filters and no private or per-user filters at this time.
To create a Saved Filter, craft the query in Basic or Advanced mode that provides you with the data set needed
Click the Save icon on the left of the search bar
A small modal will open. Give the filter an easy to identify name and click the blue Save button within the modal to save your filter
The Saved Filter will then be available in the dropdown list of the Filters area, towards the top left of the Users page
To modify an existing Saved Filter, simply select the desired filter from your list of Saved Filters. The Saved Filter attributes will automatically be added to the search bar. From here, you can modify the search parameters in the search bar. Click the Save icon next to the search bar again to re-save it.
To delete an existing Saved Filter, select the desired Saved Filter, then click the Trash icon next to it's name.
As noted above, Saved Filters are available to all users with access to your Identity Intelligence tenant. To share a link outside of the console, for instance via email, Webex, Teams, or Slack channels or direct message:
Select the Saved Filter you want to share
Click the Share icon on the righthand side of the Search bar to copy a direct link to your clipboard
Paste the link where desired to share the data with other team members who have access to your Identity Intelligence tenant
