To add an Incident View:
Click Incidents > Display Incident View Manager. Alternatively, you may click Display Incident View button on the Tool Bar.
Open the View Options by either:
Clicking the down-arrow on the Manage Views button located in bottom right corner of the window and selecting Add View.
or
Clicking the down arrow on the Manage Views button located in the bottom right corner of the window, selecting Manage Views and then clicking the Add View button.
Enter a name in the Option Name field. Click each button (listed below) to specify the options.
Fields: The variables of the events attached to incidents are displayed as fields. By default, all the fields are arranged as columns in the Incident View. In the field options window, you may add or remove columns that display and arrange the order of the columns by moving the up and down arrows.
Group By: You may set rules to group incidents in the display View.
Sort By: You may set rules to sort the incidents in the display view.
Filter: You may set Incident filters. Only the Incidents that match your filter displays in the View.
Leaf Attribute: You may select an attribute from the list which is displayed as the first column in the Incident View.
Click Save.