Use Advanced Search
To perform an advanced search:
- Show the assets.
- Select ExploreAssets.
- Select Advanced to start an advanced search.
- Create your Use Advanced Search Expressions in the
search box.Your search expression is composed of a set of supported fields, operators, and values.As you create your search expression, the Aperture service provides field name matching and syntax suggestions to help you complete the expression.For policy.name, a list of existing policy names appears as you type so you can quickly pick the name from the list, instead of typing the full name.If you want to view and sort search results in another application, such as Microsoft Excel, click to export the list to a comma-separated values (CSV) file.
- Take actions on the cloud assets that match your filtering
criteria.See Supported Applications with Remediation for a list of actions available.
- Select the assets on which you want to take
- Select specific assets in the display results.
- To select all assets in the display results, select the Exposure column heading.
- Select one or more of the following actions:
- Explore to view details about the asset.
- Download File.
- Delete Content.
- Send Email to the file owner. The email template automatically includes the email addresses of all selected assets.
- Notify via Webex Bot to send a message using the Cisco Webex bot that you configured in Begin Scanning a Cisco Webex Teams App.
- Close Incidents. To Close Incidents, select a reason from the drop-down.
- Assign an Incident Category to the asset. From the drop-down, select a category to apply; to create a new category see Customize the Incident Categories.
- Assign To an administrator. To Assign Incidents to Another Administrator, select an administrator from the drop-down.
- Add Note to the asset. Adding a note allows you to provide context about your concern, give instructions, or supplement information about the asset before assigning to another administrator.
- Select the assets on which you want to take action.
What is an Incident?
The Aperture service identifies and sets the state and category for each incident discovered during the scanning of your assets. ...
Assign Incidents to Another Administrator
Use Bulk Incident to assign a group of incidents to another Aperture administrator or assign incidents individually. ...
Customize the Incident Categories
Add custom incident categories for Open or Closed states to help filter incidents and track changes. ...
Assess New Incidents
The Aperture service compiles a summary all incidents to be assessed and addressed by further investigation or closure. ...
Begin Scanning a Cisco Webex Teams App
Begin Scanning a Cisco Webex Teams App The Aperture service scans messages and files shared on spaces within the Cisco Webex Teams app. To begin ...
Close one incident at a time or use Bulk Incident to close multiple incidents at once on Aperture. ...
Modify Incident Status
Use Aperture to update the investigation status of an incident after being identified. ...
Remediate Issues The Palo Alto Networks® Aperture™ service provides detailed information about the incidents it detects as it scans assets in your managed SaaS applications. ...
Assess Incidents When you first add a new SaaS application, the Aperture service goes through a discovery phase where it compares the enabled data patterns ...