Query Conditions

Optionally, you can create conditions on individual fields or on groups as part of the query. You can add filters, and conditions based on assets, vulnerabilities, and active lists. Query conditions represent the WHERE clause of the query.

Use the Common Conditions Editor (CCE) within the query editor to create query conditions as described in this section.

Tip: The Common Conditions Editor is used throughout the ArcSight Console for various resources. In addition to the topics that follow on defining conditions for a report query, see also Common Conditions Editor (CCE), Conditional Statements, Conditions, and Logical Operators.