Filtering the Endpoint Devices Page

You can filter the Endpoint Devices page to concentrate on the devices you most want to see. You can filter out the data you don't want to see to find the data you're interested in more easily.

Multiple filters can be active at any time.

Filters are active until you remove them, even if you navigate to another page. When you return to the Endpoint Devices page, the filter is still in place.

The difference between filters and quick filters

You can create filters two ways by:

• Adding a filter
• Creating a quick filter

Adding a filter lets you select a field and the value you want to filter on.  Quick filters have many of the same fields to filter on, but you can only create filters on items on the Device Details popup, and can only filter on the values of the specific device you're currently viewing. For example, if you create a filter on the OS field, you can select Windows or macOS. If you create a quick filter, you can only filter on the OS of the device you're currently viewing. If you're viewing the details of a Windows device, you can only filter for Windows devices.

Adding a filter also lets you create exclusion filters, which you can't do with quick filters. For more information, see the Exclusion filter section below.

You can use a combination of filters and quick filters.

Exclusion filters

You can create filters that exclude the values you choose, so everything is displayed except for the chosen values. For example, if you select the Date Registered filter, choose 1 Month, and then negate that condition, all devices registered before one month are displayed.

Filter operators

When you add filters, you have the choice to use an And or an Or operator. The operator is applied to all the filters you add.

To create and apply a filter to the Endpoint Devices page

1. In Barracuda XDR Dashboard, click Infrastructure > Endpoint Devices page.
2. Click Add filter.
   
3. In Field, select an option.
4. In Value, select an option.
5. Optionally, if you want to exclude the values you chose in the Field and Value fields, enable the Negate this condition check box.
6. Click Apply Changes.
7. Repeat steps 2-6 until you have added all the filters you want.
8. Optionally, in the Filters area, click one of the following filter operators:
   • And
   • Or

To create a quick filter by a top alarm, alert, source country, source IP, or destination IP

1. In Barracuda XDR Dashboard, click Infrastructure > Endpoint Devices page.
2. Click the row of the device you want to filter on in the Endpoint Devices table.
3. In the Device Details page, hover your cursor over row of the Field and Value you want to filter on.
   
   A magnifying glass icon appears.
4. Click the on the row.

To edit a filter

1. In Barracuda XDR Dashboard, click Infrastructure > Endpoint Devices page.
2. Click the filter you want to edit.
   
3. In Field, select an option.
4. In Value, select an option.
5. Optionally, if you want to exclude the values you chose in the Field and Value fields, enable the Negate this condition check box.
6. Click Apply Changes.

To remove a filter or quick filter

1. In Barracuda XDR Dashboard, click Infrastructure > Endpoint Devices page.
2. Click the filter/quick filter you want to remove.
3. Click Remove.

To remove all filters

1. In Barracuda XDR Dashboard, click Infrastructure >Endpoint Devices page.
2. Click Clear All.