List tables and bulk actions

Most Web UI modules show configurable tables: sortable columns, pagination, optional row selection, and — on many screens — bulk actions or a context menu. This page describes the shared pattern; action names differ by module (alerts vs keys vs policies).

See also: TQL search and filters · Bulk actions and context menu (alerts) · Alerts table

Task	Section
Sort and paginate	Table layout
Show or hide columns	Column manager
Select rows	Row selection
Run actions on many rows	Bulk actions toolbar
Right-click shortcuts	Context menu

Table layout

Capability	Typical behavior
Sorting	Click column headers; default sort varies (for example Last Update descending on alerts)
Pagination	Page size control and next/previous pages
Row click	Single click selects checkbox; double-click may open editor (feature-specific)

Feature pages should state the default sort column and any columns that cannot be hidden.

Column manager

Open Column manager (toolbar control) to show or hide optional columns. Required columns (for example Severity and Last Update on the alerts dashboard) stay visible.

Reordering columns by dragging a grip handle in the table header is available only on the alerts dashboard table; other list tables keep using Column manager.

1. Open Column manager.
2. Toggle columns on or off.
3. Close the manager — the table layout persists for your session where the product saves preferences.

Row selection

When the table supports bulk operations:

1. Select rows with checkboxes or click modifiers (Ctrl, Shift) where documented.
2. The toolbar shows Bulk actions, Clear selection, and Invert selection when at least one row is selected.

Control	Description
Clear selection	Deselect all rows
Invert selection	Toggle every row on the current page

Bulk actions toolbar

Open Bulk actions to run an operation on all selected rows. Available items depend on permissions, license, and selection count (some actions require exactly one row).

Alert-specific actions (Acknowledge, Watch, Tools, Delete, and others) are listed in Bulk actions and context menu.

Management and Access Control tables expose module-specific bulk items (enable/disable, delete, copy key, and so on) — document those on the feature page, not here.

Context menu

Right-click a row to open the context menu. On many screens the menu mirrors Bulk actions; if the row was not selected, it becomes the selection.

One menu, one highlight

Treat the context menu as a single UI surface — same actions as the bulk dropdown where the product implements both.

Search and filters with tables

Table toolbar search (plain or TQL) filters the current result set; it does not change which module you are in. See TQL search and filters.

Best practices

1. Hide columns you do not need — reduces horizontal scroll on laptop screens.
2. Invert selection on a filtered page when you need "everything except these rows" on the current page.
3. Prefer bulk acknowledge / status on alerts during shift handoff; use Add Note when several rows share the same investigation state.
4. Right-click for speed; use Bulk actions when training operators on the full action list.