Incidents with blank subject line

Products

• Information Centric Analytics

Issue/Introduction

Is there a wildcard or other method that can be used in the Subject filter on the Events > Data In Motion > Search page to display only incidents that have a blank subject line?

Environment

Version : 6.x

Component : Search

Resolution

There is not a method for searching for empty strings in the DIM search at this time. This functionality will be added to a future version of Information Centric Analytics (ICA).

As a workaround, a SQL-based dashboard could be created to display such incidents.