Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

How to list only a specific device’s detections on the Broad Context Detections page in the Elements portal?

Issue:

How to list only a specific device's detections on the Events > Broad Context Detections page in the Elements Security Center portal? There is no "device name" filter option

 

Resolution:

On the Events > Broad Context Detections page there is a Data content filter option, which can be used to show specific strings that a detection contains. It can be used to show only detections that contain a specific device name and it can be also be used to show only a specific BCD-ID. 

  1. Log in to the Elements Security Center portal
  2. Navigate to the Events > Broad Context Detections page
  3. Select the Broad Context Detections tab
  4. Click in the filter Choose an option and select Data content
  5. Use the Contains setting
  6. In the Add value field, enter the string that the detection should contain, for example a device's host name
  7. Click Add

Now the list will show only the detections that include that string.