Filtering Search or Top N does not return any results.

Products

• ICDx
• Integrated Cyber Defense Exchange

Issue/Introduction

When you use a search expression in Search or Top N to discover entries, you may unexpectedly find that no results are returned.

Environment

Release : 1.4.1

Component :

Cause

Search and Top N search expressions only work with indexed attributes

Resolution

You must use indexed attributes for Search or Top N search expressions. The list of searchable event attributes can be found in the following article:

Searchable Event Attributes in ICDx

Additional Information

Once there are search results, another filter field will be available and you can further filter using the Filter expression. The Filter expression uses all fields for greater filtering flexibility. More information on Filters can be found in this article:

Adding Filters to Queries in ICDx