Cisco Cisco Firepower Management Center 4000
41-22
FireSIGHT System User Guide
Chapter 41 Configuring Remediations
Working with Remediation Status Events
Step 4
If you want to save the search so that other users can access it, clear the
Save As Private
check box.
Otherwise, leave the check box selected to save the search as private.
Tip
If you want to save a search as a restriction for restricted event analyst users, you must save it as a private
search.
search.
Step 5
You have the following options:
•
Click
Search
to start the search.
Your search results appear in the default remediation status workflow, constrained by the current
time range. To use a different workflow, including a custom workflow, click
time range. To use a different workflow, including a custom workflow, click
(switch workflow)
by the
workflow title. For information on specifying a different default workflow, see
•
Click
Save
if you are modifying an existing search and want to save your changes.
•
Click
Save as New Search
to save the search criteria. The search is saved (and associated with your
user account if you selected
Save As Private
), so that you can run it at a later time.