By default, the External Notifications page shows all notifications that have come to the Carbon Black App Control Server from a network security device.
The pre-configured Saved Views can help focus the view on certain types of notifications:
- Active Notifications – Shows all notifications that do not have a status of Closed and were not a result of an analysis request from the Carbon Black App Control Console. This is the default view. See Manage Notification Status for a discussion of notification status.
- File Analysis Results – Shows all notifications from files that were submitted for analysis from the console.
- Notifications with Files – Shows any notifications that include at least one file hash, whether or not that file is known to the Carbon Black App Control Server.
- Notifications with Known Files on Computers – Shows any notifications that include at least one file hash for a file known to the Carbon Black App Control Server because it is or was on an agent-managed system.
- Palo Alto Networks Notifications – Shows the notifications received from Palo Alto Networks devices.
As with other console table pages, you can customize the view using the Show Filters and Show Columns buttons, and you can save any customized view.