Apply quick filters on Security Incidents and Response Tasks lists

task australia Updated Sep 10, 2026 1 min read use-quick-filters-for-security-incidents.md
Raw file servicenow.com

Apply the predefined quick filters on Security Incidents and Response Tasks lists to get the desired work items.

Before you begin

Role required: sn_si.analyst

Procedure

  1. Navigate to Workspaces > Security Incident Response Workspace.

  2. Select the list icon ([Omitted image "listview-icon.png"] Alt text: list icon).

  3. Select any list item under Security Incidents or Response Tasks.

    The Quick Filter page displays all the currently selected filters with the counts of the number of records matching each filter.

  4. Select one or more filters apply on the selected view.

    Note:

    • When you select multiple filters, they are combined using the AND logic.
    • Use the Clear button to clear the filter selection.
  5. Select the Edit Quick Filter Selection icon [Omitted image "icon-edit.png"] Alt text:to add or remove filters which are available in the Quick Filter panel.

    The Edit Quick Filters page appears with all the selected filters.

  6. Select anywhere in the textbox to display the list of all the available filters.

    [Omitted image "edit-quick-filters.png"] Alt text: Edit quick filters

  7. Select the required filters.

  8. Select Save.

    Selected filters are displayed in the Quick Filters pane. This configuration persists for a security analyst.

Parent Topic:List view in SIR Workspace

Related topics

Personalize a list

Assign Security Incidents

Close multiple security incidents

Assign Response Tasks

Report Phish Email

Working with quick filters

Export Security Incidents or Response Tasks

Manage Shift Handover records

Search documentation
Search document titles and file paths on the australia branch