Cisco Cisco Firepower Management Center 4000

Any

Use the following procedure to view a custom workflow that is not based on a custom table. Keep in 
mind that workflow access depends on your platform and user role, as described in 

Admin/Any Security Analyst

Select the appropriate menu path and option for the table on which you based your custom workflow, as 
described in the 

The first page of the default workflow for that table appears. To use a different workflow, including a 
custom workflow, click 

 beside the current workflow title. For information on specifying 

a different default workflow, see 

. If no events appear and 

the workflow can be constrained by time, you may need to adjust the time range; see 

.

FireSIGHT

Use the following procedure to view a custom workflow that is based on a custom table. 

Admin/Any Security Analyst

Select 

.

The Custom Tables page appears, listing the available custom tables.

Click the view icon next to the custom table you want to view, or click the name of the custom table.

The first page of the default workflow for that table appears. To use a different workflow, including a 
custom workflow, click 

 beside the current workflow title. For information on specifying 

a different default workflow, see 

. If no events appear and 

the workflow can be constrained by time, you may need to adjust the time range; see 

.

Any

If your event evaluation process changes, you can edit custom workflows to meet your new needs. Note 
that you cannot edit any of the predefined workflows.

Admin/Any Security Analyst