Re: Having more than one use case on a Metron instance

2020-02-19 Thread Simon Elliston Ball
Not at present, no, but you can just open multiple instances. Saved searches are also per user, so that might provide a workaround. Simon On Wed, 19 Feb 2020 at 16:23, Euan Hope wrote: > Thanks so much for the quick feedback. I will put this forward to the > client. > > To gain a sense of what

Re: Having more than one use case on a Metron instance

2020-02-19 Thread Euan Hope
Thanks so much for the quick feedback. I will put this forward to the client. To gain a sense of what is possible, is there possibly a way to configure more tabs in the Alerts UI (for example, there is the PCAP tab available in our UI)? Or possibly as another alternative, is it possible to config

Re: Having more than one use case on a Metron instance

2020-02-19 Thread Simon Elliston Ball
I would suggest using saved searches, which also remember the selected columns. Simon On Wed, 19 Feb 2020 at 15:51, Euan Hope wrote: > Hi again Metron community. > > Sorry to post another question in such quick succession. > > Our client has asked us to implement another use case on the Metron

Having more than one use case on a Metron instance

2020-02-19 Thread Euan Hope
Hi again Metron community. Sorry to post another question in such quick succession. Our client has asked us to implement another use case on the Metron instance we have set up for them. This new use case uses similar data to the original use case but the threat triage rules for scoring the record