Working with report filters

You can use filters to narrow the focus of a report or to find specific information or devices.

A filter consists of two, three, or four fields depending on the filter options you choose.

The four types of filter fields are defined as follows:

Field type

Description

Data point

Choose from a list of available data point A discreet unit of information that is detected on a device and communicated to the Absolute Monitoring Center by the device's Secure Endpoint Agent.s to use as filter criteria

The Secure Endpoint Agent detects and reports on a multitude of data points on a device. You can create a filter based on any of these data points. If you are filtering a device list, you can also filter by Custom Fields, such as Asset Number or Department.

To find a particular data point in the list, begin entering the data point name in the search field at the top of the list and from the filtered search results, select the data point. If the Expand icon shows next to a list item, click the item and select a data point from the list. For example, click OS to view the list of operating system related data points, and select Name.

Condition

Choose from a list of conditions specific to the selected data point

Value

Refers to one of the following elements, depending on the values specified in the data and condition fields:

  • a text field where you enter a keyword or value
  • a list of options
  • a Yes/No toggle
  • a calendar, if the data point is date-based

Unit of time

This field is available only if the within last or not within last filter condition is selected for a date-based data point.

Select one of the following options:

  • Days
  • Hours
  • Minutes
  • Weeks
  • Months
  • Years

You can use dates and times to filter your results.

To add a date-based filter:

  1. In the filter dialog, click the data field and select a date-based data point from the list, such as Last Call.
  2. Click the condition field and select a date-based filter condition from the list, such as later than.

  3. Click the third field to open the Calendar dialog, and do one of the following:

    • To add a date only, select a date from the calendar and click OK or Done. The Time defaults to 12:00 a.m.

      If you selected the between or not between filter condition, two date fields show. Add the start date in the From field and the end date in the To field.

    • To add a date and time, select a date from the calendar and then do one of the following depending on the options available in the calendar:

      • Drag the sliders next to Hour (24 hour clock) and Minute to specify a Time and click Done.
      • Click Select Time, select a hour and minute, and click OK.

Combine filters to produce the results you want:

  • To expand the results, click OR within a filter group and add another filter. Results that satisfy at least one of the filters are included.
  • To refine the results, click to add a new filter group. Only the results that satisfy all the filter groups are included.

You can remove one filter, or all of the filters in a section.

  • To remove an individual filter when combining filters, click next to the filter.
  • To remove an entire filter group, click on the filter group to open it and click Remove this filter.

You use a filter condition to specify the action to apply to a filter criterion to find a specific set of results.

The following filter conditions are available:

  • is: find results that exactly match the keyword or value
  • is not: find results that do not match the keyword or value
  • contains: find results that include the numbers or characters specified in the keyword or value
  • does not contain: find results that do not include the numbers or characters specified in the keyword or value
  • begins with: find results that begin with the numbers or characters specified in the keyword or value
  • does not begin with: find results that do not begin with the numbers or characters specified in the keyword or value
  • ends with: find results that end with the numbers or characters specified in the keyword or value
  • greater than: find results that are greater than the specified numeric value
  • greater than or equal to: find results that are greater than or match the specified numeric value
  • less than: find results that are less than the specified numeric value
  • less than or equal to: find results that are less than or match the specified numeric value
  • between: find results that are within the specified IP range (applies to Public IP address, Public IPv6 address, Local IP address, and Local IPv6 address filters only), or between the specified numeric values
  • not between: find results that are not within the specified IP range (applies to Public IP address, Public IPv6 address, Local IP address, and Local IPv6 address filters only), or not between the specified numeric values
  • is empty: find results where a value for the specified filter criterion is not specified
  • is not empty: find results where a value for the specified filter criterion is specified

Date-based filter conditions

The following date-based filter conditions are available:

  • is: find results that occurred on the specified date
  • is not: find results that did not occur on the specified date
  • later than: find results that occurred after the specified date and time
  • later than or equal to: find results that occurred after or at the specified date and time
  • earlier than: find results that occurred before the specified date and time
  • earlier than or equal to: find results that occurred before or at the specified date and time
  • between: find results that fall between the two specified dates
  • not between: find results that do not fall between the two specified dates
  • within last: find results that occurred within the last specified number of minutes, hours, days, weeks, months, or years
  • not within last: find results that did not occur within the last specified number of minutes, hours, days, weeks, months, or years
  • is empty: find results where a date and time for the specified filter criterion is not specified
  • is not empty: find results where a date and time for the specified filter criterion is specified