Setting the component options

On the edit view for the Alerts component, you can configure settings for filtering and data refinement.

For a new component, the edit view looks like:

To configure the component options:

1. Configure the checkboxes as follows:

   Field	Description
   Enable type-ahead filtering	If this checkbox is checked, then when end users display the list of alerts, there is a search box at the top to allow them to filter the list. If the box is not checked, then the search box is not displayed. This box is checked by default.
   Respect data source refinement state	If this checkbox is checked, then the EQL query for the alert is only performed on the data for the current refinement. If the box is not checked, then the EQL query is performed on the entire data set. This box is checked by default.

2. To save the changes, click the Save Preferences button.

   Note that the Save Preferences button does not affect the alert group configuration.