Cisco Cisco Firepower Management Center 2000
46-8
FireSIGHT System User Guide
Chapter 46 Using Custom Tables
Deleting a Custom Table
The Edit Custom Table page appears. See
for information on the
various configurations you can change.
Step 3
Optionally, remove fields from the table by clicking the delete icon (
) next to the fields you want to
remove.
Note
If you delete fields currently in use in reports, you will be prompted to confirm that you want to
remove the sections using those fields from those reports.
remove the sections using those fields from those reports.
Step 4
Make other changes as needed and click
Save
.
Your custom table is updated.
Deleting a Custom Table
License:
FireSIGHT
You can delete a custom table that you no longer need. If you delete a custom table, saved searches that
use the custom table are also deleted.
use the custom table are also deleted.
To delete a custom table:
Access:
Any/Admin
Step 1
Select
Analysis > Custom > Custom Tables
.
The Custom Tables page appears.
Step 2
Click the delete icon (
) next to the custom table you want to delete.
The table is deleted.
Viewing a Workflow Based on a Custom Table
License:
FireSIGHT
When you create a custom table, the system automatically creates a default workflow for it. The first
page of this workflow displays a table view of events. If you include intrusion events in your custom
table, the second page of the workflow is the packet view. Otherwise, the second page of the workflow
is a hosts page. You can also create your own custom workflows based on your custom table.
page of this workflow displays a table view of events. If you include intrusion events in your custom
table, the second page of the workflow is the packet view. Otherwise, the second page of the workflow
is a hosts page. You can also create your own custom workflows based on your custom table.
Tip
If you create a custom workflow based on a custom table, you can specify it as the default workflow for
that table. For more information, see
that table. For more information, see
.
You can use the same techniques to view events in your custom table that you use for event views based
on predefined tables. See
on predefined tables. See
for more information.