Managing default views

Default views in the By Endpoint, By Threat, and System Events view categories can be hidden, disabled, or copied as a custom view, allowing you to display only the views that are useful to the user.

To hide default views:

1. Go to Incidents & Events > Event Monitor.
2. Select an event category.
3. Right-click on an event view and select Hide.

To disable/enable default views:

1. Go to Incidents & Events.
2. Select the gearicon on the bottom of the navigation tree to access the Default Views
3. Choose which views are displayed. Add a checkmark to enable the view; remove the check mark to disable the view.
4. Select Save.