Cisco Cisco Firepower Management Center 4000

Page of 1844
 
46-8
FireSIGHT System User Guide
 
Chapter 46      Using Custom Tables 
  Deleting a Custom Table
The Edit Custom Table page appears. See 
 for information on the 
various configurations you can change.
Step 3
Optionally, remove fields from the table by clicking the delete icon (
) next to the fields you want to 
remove.
Note
If you delete fields currently in use in reports, you will be prompted to confirm that you want to 
remove the sections using those fields from those reports.
Step 4
Make other changes as needed and click 
Save
.
Your custom table is updated.
Deleting a Custom Table
License: 
FireSIGHT
You can delete a custom table that you no longer need. If you delete a custom table, saved searches that 
use the custom table are also deleted.
To delete a custom table:
Access: 
Any/Admin 
Step 1
Select 
Analysis > Custom > Custom Tables
.
The Custom Tables page appears.
Step 2
Click the delete icon (
) next to the custom table you want to delete.
The table is deleted.
Viewing a Workflow Based on a Custom Table
License: 
FireSIGHT
When you create a custom table, the system automatically creates a default workflow for it. The first 
page of this workflow displays a table view of events. If you include intrusion events in your custom 
table, the second page of the workflow is the packet view. Otherwise, the second page of the workflow 
is a hosts page. You can also create your own custom workflows based on your custom table.
Tip
If you create a custom workflow based on a custom table, you can specify it as the default workflow for 
that table. For more information, see 
.
You can use the same techniques to view events in your custom table that you use for event views based 
on predefined tables. See 
 for more information.