Use Ctrl or Shift to edit multiple events that are already
grouped and filtered.
About this task
This task applies to security
events, user defined events, and response filters.
Procedure
- Do one of the following
- To select multiple events, press Ctrl, and then select
each event.
- To select a range of events, press Shift, and then select
the first and last events in the range.
- Click the Edit icon.
Notes: - Every item you edit is changed for every selected event.
- A blue triangle icon appears next to any item in the selected
events that has a different value. If you use this icon to change
the value of a field, the value changes for all selected events and
the blue triangle icon no longer appears next to the field. Example: If
you select to edit two events and one has blocking enabled and the
other does not, a blue triangle appears next to Block. If you enable
the block response on the event that was originally disabled, then
both events have blocking enabled, and the blue triangle disappears.
- Click OK.