Posture Control (DSPM)
Editing or Deleting an Investigation
You can edit an existing or a saved query. But you can delete only saved investigation queries.
Editing an Investigation
To edit an investigation query:
- Go to Analytics > Investigation.
- You can edit the investigation by using any of these options:
- On the History tab:
Click the Query to view the drawer, then click the Edit icon at the top right corner.
Click the Actions icon (
) and select Open in Editor.
- On the Saved tab:
Click the Actions icon (
) and select Edit Query.
- On the History tab:
- Edit the query by adding or removing predicates, as required.
Click Run Query to view the results.
- Click Save Investigation to save the query.
Enter a name for the query.
- Click Save.
Deleting an Investigation
You can delete only those investigations that you've saved.
To delete an investigation:
- Go to Analytics > Investigation.
On the Investigation page, select the Saved tab.
- You can do the following:
Click the Actions icon (
) and select Delete.Click the Name or Query to view the drawer, then click the Delete icon.
Read the confirmation message, then click Delete.
The query is deleted.
