Create query categories

You can create custom query categories in Live Discover.

Restriction This feature might not be available for all customers yet.

Custom categories let you group queries the way you want to. For example, you can put the queries you run most often into a new category.

You can put predefined Sophos queries or custom queries or a mix of both into a custom category.

Create a category

To create a category and add queries to it, do as follows:

  1. Go to Overview > Threat Analysis Center and click Live Discover.
    Live Discover menu
  2. In Live Discover, turn on Designer Mode (if it isn't already on). This allows you to create and edit queries and to create new categories.
    Designer Mode
  3. Click Create new category.

    It doesn't matter which tab you're on. You can create a category from any of the tabs in Live Discover.

    Create new category button
  4. Give your category a name and description. Click Submit.
    Create new category dialog
  5. Check that the new category shows in Live Discover.

    Custom categories are shown with a special icon.

    Categories list
  6. Add queries to your category:
    • To add a new query, click Create new query, and select your new category in the Category drop-down menu.
    • To add an existing query, open the query, click Edit, and edit the Category to add your new category.

    If you add a predefined, Sophos query to your new category, you're asked to rename it.

    Category menu

Update a category

You can only update custom categories.

To update a category, do as follows.

  1. Go to Live Discover.
    Live Discover menu
  2. Click the category you want to update.
    Categories list
  3. Click Update Category.
    Update category button
  4. Change the name or description and click Save.
    Updating Category dialog

Delete a category

You can only delete custom categories.

Deleting a category doesn’t delete the queries in it. Queries remain in All Queries and any other categories they’re in.

To delete a category, do as follows:

  1. Go to Live Discover.
    Live Discover menu
  2. Click the category you want to delete.
    Categories list
  3. Click Delete category.
    Delete category button
  4. Click Delete to confirm that you want to delete the category.
    Delete category dialog