Setting Up a Custom Triage

LAST UPDATED: NOV. 22, 2024

The Investigation Dashboard provides an organized view of custom triages across Investigation Dashboard sections. Under each of these sections, such as that of Events and Incidents, custom triages are distinctly categorized beneath the System Triage heading, allowing for efficient identification and differentiation.

Setting up a custom triage in D3 allows users to efficiently organize and categorize data, enabling quicker identification, prioritization, and response to actionable items. For demonstration purposes, a custom triage for incidents will be created.

Procedure

1. Drag the table's column headers into the Saved Searches field to define groupings.

   

2. Observe the number of groupings reflected in a hierarchical structure, aligned with the order in which the attributes are positioned within the Saved Searches field.

   

3. Click on the button next to the Incidents accordion.

   

4. Create the custom triage.

   

   1. Input a unique custom triage name.

   2. (Optional) Share this triage.

   3. Click on the Create button.

READER NOTE

The and arrows indicate sort order.

• indicates the current sort order is ascending, while indicates it is descending.

• Clicking on incident attributes within the Saved Searches field will modify the corresponding arrows (pointing up, down, or no arrow) and adjust the order of groupings (accordions in the table).

• Clicking on incident attributes within the table headers will adjust the corresponding arrows and alter the sorting of items within groups (nested items inside the accordions). A Columns Sorting section will render within the Edit Triage popup when sorting is applied in either ascending or descending order.

  

5. Observe the newly created custom triage.

   

Users can now return to this custom triage from any other view.