My Event Queue Tab

The My Event Queue tab displays all events added to your queue using the Add to My Queue button. On the My Event Queue tab, you can search for and work with events in your queue.

MyEventQueueTab.png

Tip

Users often add events that provide evidence of suspicious or malicious activity to their queue.

Events on the My Event Queue tab remain in your queue until you remove them from the queue. However, since the event is now in your queue, it can only be searched for in the My Event Queue tab – it is no longer searchable in the All Raw Events tab.

Search for Events

You can search for specific events in the My Event Queue tab. For more information, see Search for Events.

Event Details

Each event added to the queue includes metadata related to the action the event records. The event details displayed depend on the source of the event. For more information, see All Raw Events Tab > Event Details.

View an Event's JSON
  1. Log into the Threat Stack CSP.
  2. Click the Events tab. The Events screen displays.
  3. Click the My Event Queue tab. The My Event Queue tab displays.
  4. Hover the mouse cursor over the event for which to view the JSON. The action bar displays.

    ViewJSON.png

  5. Click the View JSON button. The Event JSON dialog opens.

    EventJSONDialog.png

Remove an Event from Queue

Remove events from your queue when they are no longer relevant to your workflow. If the event is still within the three day retention period, then it redisplays on the All Raw Events tab. If the event is outside of the three day retention period, then, if the event is not tied to an alert, it is removed from the Threat Stack CSP.

  1. Log into the Threat Stack CSP.
  2. Click the Events tab. The Events screen displays.
  3. Click the My Event Queue tab. The My Event Queue tab displays.
  4. Hover the mouse cursor over the event to remove from the queue. The action bar displays.

    RemoveEvent.png

  5. Click the Remove Event button. The event no longer displays in the queue.

Related Articles

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request