Use Ctrl or Shift to edit multiple events that are already
grouped and filtered.
About this task
This task applies to security
events, user-defined events, and response filters.
Procedure
- Do one of the following
- To select multiple events, press Ctrl,
and then select each event.
- To select a range of events, press Shift,
and then select the first and last events in the range.
- Click the Edit icon.
Notes: - Every item you edit is changed for every selected event.
- A blue triangle icon appears next to any item in the selected
events that has a different value. If you use this icon to change
the value of a field, the value changes for all selected events and
the blue triangle icon no longer appears next to the field. Example: If
you select to edit two events and one has blocking enabled and the
other does not, a blue triangle appears next to Block.
If you enable the block response on the event that was originally
disabled, then both events have blocking enabled, and the blue triangle
disappears.
- Click OK.