Search and Filter Rules

The Rules page offers both search and filter capabilities.

SearchFilterSection.png

Search

You can search for specific rules using keywords in the rule title, such as user, timestamp, or session identification (ID). You can then use an operator to specify the specific keyword match, such as a specific rule ID.

You search for specific rules in the Search field.

SearchField.png

The text under the Search field displays the number of rules that match the search criteria. By default, when no search criteria are entered, the text displays the total number of rules available in F5 Distributed Cloud App Infrastructure Protection (AIP).

To search for specific rules:

  1. Log into Distributed Cloud AIP.
  2. In the left navigation pane, click Rules.


    rules-tab.png

    The Rules page displays.

    RulesPage.png

  3. In the Search field, type the keyword in the rule title by which to search. The search results will include full and partial matches to the keyword. Do not use operators, such as AND, OR, =, and so on, in the Search field.


    SearchField.png

  4. Press ENTER. The rule list changes to display only rules that match the search criteria. The text below the Search field changes to show the number of rules that match or partially match the search criteria. For example, if you search for "start," then the search results return rules with titles that include "start," "starts," and "startup."


    SearchResults.png

Filter

Distributed Cloud AIP provides several types of filters you can use to narrow down the particular rules visible in the rule list.

FilterSection.png

  1. Filters button – By default, filters display on the Rules page. To hide filters, click the Filters button. The button turns gray and the filters no longer display.
  2. Ruleset/Group – Select one or more checkboxes to only view rules belonging to the selected ruleset(s). Every ruleset available in your Distributed Cloud AIP organization displays, with Distributed Cloud AIP provided rulesets displayed first, and your custom rulesets displayed second. If there are more rulesets than can be displayed by default, then click the +More button. If you want to find particular rulesets, then type a keyword from the ruleset name in the Filter field and press ENTER.
  3. Rule Type – Select one or more checkboxes to only view rules belonging to the selected type. To display every rule type available in your Distributed Cloud AIP organization, click the +More button. These categories match the Distributed Cloud AIP rule types, such as CloudTrail or Host, and display in alphabetical order. For more information, see Rule Creation Overview.
  4. Status – Select a checkbox to only view rules that are enabled or disabled in your Distributed Cloud AIP organization.
  5. Severity – Select one or more checkboxes to only view rules of that apply to a particular level of severity.

Related Articles

Was this article helpful?
0 out of 0 found this helpful