I would suggest using saved searches, which also remember the selected columns.
Simon On Wed, 19 Feb 2020 at 15:51, Euan Hope <[email protected]> wrote: > Hi again Metron community. > > Sorry to post another question in such quick succession. > > Our client has asked us to implement another use case on the Metron > instance we have set up for them. This new use case uses similar data to > the original use case but the threat triage rules for scoring the records > are very different. > > The request was to have another tab in the Alerts UI so that the different > SOC analysts could use different screens for the different use cases. > > Is there any way to configure this? And if not, does anyone in the > community have suggestions on how to approach this? > > Thanks in advance for the help. > -- -- simon elliston ball @sireb
