Sidebar filters

Route: /dash

The filter sidebar on the left of the dashboard narrows alerts within the active view tab. Use category checkboxes, a time range, and custom filters — separate from Access Control views, which define which alerts you may see at all.

See also: Overview · Search (TQL) · View tabs · Views

Task	Section
Show or hide the sidebar	Show and hide filters
Filter by category	Category filters
Limit by time	Time range
Build a custom filter	Add custom filter
Persist your filter set	Save current filters

Show and hide filters

1. On the table toolbar, click the panel icon (Show filters / Hide filters) to expand or collapse the sidebar.
2. When hidden, the table uses the full width; filter state is kept.
3. Expanded/collapsed state is remembered in your browser (local storage).

Category filters

Each collapsible section lists values with checkboxes and counts (when data is available):

Category	Purpose
Severity	Include or exclude severity levels
Environment	Limit to deployment environments
Status	Filter by alert status (Open, Acknowledged, Shelved, Closed, Maintenance, …)
Source	Filter by alert source
Trend indication	More severe, less severe, flapping, stabilized, unknown, …

Use Select all at the top of each section to include or exclude every value in that group. The selection count shows how many values remain included.

Maintenance status

By default, some status filters exclude Closed (and related). To review alerts affected by maintenance windows, include Maintenance in the Status category.

Time range

1. In the top toolbar, click the time range control (Enter the time range when unset).
2. Choose either:
   • A quick range (for example last hour, last 24 hours, last week) from the list on the right, or
   • A custom date range with start and end dates on the left, then click Apply.
3. Use Copy / Paste on the date range to move ranges between sessions.

Time filtering applies to alert update time and uses UTC.

Add custom filter

Build a filter without typing TQL:

1. In the top toolbar, click Add filter (plus icon).
2. In the popover, choose Field, Operator, and Value for each clause (combine with AND / OR when needed).
3. For attributes, enter the attribute key and value separately.
4. Click Add filter — the clause is added as a TQL tag in the search bar.

Common operators

Operator	Meaning	Example
eq	Equals	severity:eq:critical
ne	Not equals	status:ne:closed
contains	Contains text	resource:contains:web
not_contains	Does not contain	resource:not_contains:test
in	In list	type:in:A,B,C
gt / lte	Greater / less or equal	duplicateCount:gt:5

Available operators depend on the column type.

Save current filters

1. Configure category checkboxes, time range, and any custom filters.
2. Click Save as default filters (disk icon) in the sidebar.
3. Your filter set is stored as the default for future dashboard visits.

Load precedence

On page load, filters are applied in this order:

1. URL — if the address contains a filters query parameter, it wins.
2. Saved defaults — filters you saved with Save current filters.
3. Built-in defaults — for example excluding certain statuses until you change them.

Sidebar filters combine with TQL tags in the search bar — both apply together.

Best practices

1. Save defaults once you know which statuses and severities you always want hidden.
2. Use time range for shift handoffs — last 8 hours or a custom range for incident review.
3. Add custom filters from the top toolbar when operators prefer forms over TQL syntax.
4. Share URLs after filtering — filter and TQL state can appear in query parameters for bookmarks.