Apply discovery filters to view specific entities

The Discovery view returns a list of matching ingested entities, based on one or more rule-based search queries.

You can refine the results by applying one or more quick filters. To apply quick filters to discovery rules:

1. In the left navigation bar, go to Data configuration > Rules > Discovery.

2. Select Filter in the top left.

3. In the panel that appears, click a filter group name to expand the corresponding sub-nodes:

   • Entity type: select one or more checkboxes to include in the filtered results only the specified entity types.

   • Source: select one or more checkboxes to include in the filtered results only the specified entity sources.

   • TLP: select one or more checkboxes to include in the filtered results only entities flagged with the specified TLP color codes.

   • Date: select a time interval to include in the filtered results only entities ingested between the specified start and end dates.

   • Reliability: select one or more checkboxes to include in the filtered results only entities with the specified level(s) of reliability.

   • Discovery rules: select one or more checkboxes to include in the filtered results only entities matching the specified rule criteria.

   • Dataset: select one or more checkboxes to include in the filtered results only entities belonging to the specified datasets.
     The Dataset filter is not available when the results do not include any entities belonging to at least one dataset.

You can stack and combine filters as you need.
For example, you can create a filter to retrieve only indicators ingested from Hailataxii in the first two weeks of last month, and whose reliability flag is either A (completely reliable) or B (usually reliable).