> ## Documentation Index
> Fetch the complete documentation index at: https://docs.levelblue.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Columns Within List Views

<Icon icon="users" iconType="solid" /> Role Availability | ✔️ Read-Only ✔️ Investigator ✔️ Analyst ✔️ Manager

For each alarm in the alarm columns list, USM Anywhere displays useful information to help you determine the best response.

The following table lists the fields you see on the page.

**Default Columns Found in the List View**

| Column Field Name | Description                                                                                                                                                                                                                                                                                                                                                    |
| ----------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Alarm Summary     | It displays several fields, which are the type of attack, the method of attack, and how long the alarm happened in the past.                                                                                                                                                                                                                                   |
| Priority          | Impact of the detected attack. It can be Low, Medium, or High. See [Priority Field for Alarms](/documentation/usm-anywhere/user-guide/alarms/alarms-list-priority-field) for more information.                                                                                                                                                                 |
| Alarm Status      | Status applied to the alarm. By default, it can be Open, In Review, and Closed. See [Alarm Status](/documentation/usm-anywhere/user-guide/alarms/alarms-status) for more information. The alarms that have the status "Closed" are not displayed in the list.                                                                                                  |
| Sources           | Hostname or IP address of the source (including a national flag icon if the country is known) for an event creating the alarm.                                                                                                                                                                                                                                 |
| Destinations      | Hostname or IP address of the destination (including a national flag icon if the country is known) that received the events generating the alarm.                                                                                                                                                                                                              |
| Source Users      | Name of the user entity that was the source for an event creating the alarm.                                                                                                                                                                                                                                                                                   |
| Destination Users | Name of the user entity that was the destination of an event creating the alarm.                                                                                                                                                                                                                                                                               |
| Investigations    | Identification (ID) of the investigation associated to the alarm. See [Adding an Alarm to an Investigation](/documentation/usm-anywhere/user-guide/alarms/investigation) and [USM Anywhere Investigations](/documentation/usm-anywhere/user-guide/investigations/about-investigations) for more information.                                                   |
| Sensors           | The <Tooltip tip="Sensors are deployed into an on-premises, cloud, or multi-cloud environment to collect logs and other security-related data. This data is normalized and then securely forwarded to USM Anywhere for analysis and correlation.">sensor</Tooltip> name associated with the alarm. The type of sensor is also displayed below the sensor name. |
| Labels            | Labels applied to the alarm. By default, it can be In Progress, False Positive, Open, and Closed. You can create and manage labels. See [Labeling the Alarms](/documentation/usm-anywhere/user-guide/alarms/labeling-alarms) for more information.                                                                                                             |
| Alarm Outcome     | Outcome applied to the alarm. It can be True Positive, False Positive, or Undetermined. See [Viewing Alarm Details](/documentation/usm-anywhere/user-guide/alarms/viewing-alarms-details) for more information.                                                                                                                                                |

From the list of alarms, you can click any individual alarm row to display more information on the selected alarm, including individual events that triggered the alarm. See [Viewing Alarm Details](/documentation/usm-anywhere/user-guide/alarms/viewing-alarms-details) for more information.

To select an alarm, select the checkbox to the left of the alarm. You can select all alarms at the same time by selecting the first checkbox in the column. These buttons display when you select an alarm:

* **Remove Alarm Labels:** This button displays if there are labels associated to any alarm. Use this button to remove a label or labels from an alarm. See [Labeling the Alarms](/documentation/usm-anywhere/user-guide/alarms/labeling-alarms) for more information.
* **Apply Labels:** You can add a label to an alarm, which enables you to have classified alarms. See [Labeling the Alarms](/documentation/usm-anywhere/user-guide/alarms/labeling-alarms) for more information.
* **Add to Investigation:** You can create an investigation for an alarm or associate an investigation to an alarm. See [Adding an Alarm to an Investigation](/documentation/usm-anywhere/user-guide/alarms/investigation) and [USM Anywhere Investigations](/documentation/usm-anywhere/user-guide/investigations/about-investigations) for more information.
* **Alarm Status:** You can add a status to an alarm. See [Alarm Status](/documentation/usm-anywhere/user-guide/alarms/alarms-status) for more information.

See [Differences Between Statuses and Labels](/documentation/usm-anywhere/user-guide/alarms/alarms-status#diffStatusLabel) to distinguish between label and status.

The asset name includes a chevron icon that can be gray (<img src="https://mintcdn.com/levelblue-5324744e/h05grHs2-GuNWffi/images/usm-anywhere/angle-down.svg?fit=max&auto=format&n=h05grHs2-GuNWffi&q=85&s=a0a64beb4d270bfe8b453ec082ddaa00" className="inline m-0" width="20" height="20" data-path="images/usm-anywhere/angle-down.svg" />) if the asset is not in the system, or blue (<img src="https://mintcdn.com/levelblue-5324744e/jo1779yzvGjLisJx/images/usm-anywhere/chevron-down.svg?fit=max&auto=format&n=jo1779yzvGjLisJx&q=85&s=49cdbebf7934499f2df552d32ed9aa74" className="inline m-0" width="20" height="20" data-path="images/usm-anywhere/chevron-down.svg" />) if the asset has been added to the system.

Click the gray chevron icon (<img src="https://mintcdn.com/levelblue-5324744e/h05grHs2-GuNWffi/images/usm-anywhere/angle-down.svg?fit=max&auto=format&n=h05grHs2-GuNWffi&q=85&s=a0a64beb4d270bfe8b453ec082ddaa00" className="inline m-0" width="20" height="20" data-path="images/usm-anywhere/angle-down.svg" />) to access the following options. Your access to these options may vary based on your user role. See [Role-Based Access Control (RBAC) in USM Anywhere](/documentation/usm-anywhere/user-guide/user-management/rbac) for more information:

* **Add to Current Filter:** Use this option to add the asset name as a search filter. See [Searching Events](/documentation/usm-anywhere/user-guide/events/searching-events) for more information.
* **Find in Events:** Use this option to execute a search of the asset name in the Events page. See [Searching Events](/documentation/usm-anywhere/user-guide/events/searching-events) for more information.
* **Look Up in OTX:** This option searches the IP address of the source asset in the LevelBlue LevelBlue Labs Open Threat Exchange® (OTX™) page. See Using [OTX in USM Anywhere](/documentation/usm-anywhere/user-guide/otx/using-otx-in-anywhere) for more information.
* **Add Asset to System:** Use this option to create the asset in the system. See [Adding Assets](/documentation/usm-anywhere/user-guide/asset-management/asset-administration/adding-assets) for more information.

Click the blue chevron icon (<img src="https://mintcdn.com/levelblue-5324744e/jo1779yzvGjLisJx/images/usm-anywhere/chevron-down.svg?fit=max&auto=format&n=jo1779yzvGjLisJx&q=85&s=49cdbebf7934499f2df552d32ed9aa74" className="inline m-0" width="20" height="20" data-path="images/usm-anywhere/chevron-down.svg" />) to access the following options. Your access to these options may vary based on your user role. See [Role-Based Access Control (RBAC) in USM Anywhere](/documentation/usm-anywhere/user-guide/user-management/rbac) for more information:

* **Add to Current Filter**: Use this option to add the asset name as a search filter. See [Searching Events](/documentation/usm-anywhere/user-guide/events/searching-events) for more information.
* **Find in Events**: Use this option to execute a search of the asset name in the Events page. See [Searching Events](/documentation/usm-anywhere/user-guide/events/searching-events) for more information.
* **Look up in OTX**: This option searches the IP address of the asset in the OTX page. See [Using OTX in USM Anywhere](/documentation/usm-anywhere/user-guide/otx/using-otx-in-anywhere) for more information.
* **Full Details**: See [Viewing Assets Details](/documentation/usm-anywhere/user-guide/asset-management/asset-administration/viewing-asset-details) for more information.
* **Configure Asset**: See [Editing Assets](/documentation/usm-anywhere/user-guide/asset-management/asset-administration/editing-assets) for more information.
* **Delete Asset**: See [Deleting the Assets](/documentation/usm-anywhere/user-guide/asset-management/asset-administration/deleting-assets#DeletingAssets) for more information.
* **Assign Credentials**: See [Managing Credentials in USM Anywhere](/documentation/usm-anywhere/user-guide/vulnerability-assessment/credentials) for more information.
* **Authenticated Scan**: This option displays depending on the USM Anywhere Sensor associated with the asset. See [Running Authenticated Asset Scans](/documentation/usm-anywhere/user-guide/asset-management/asset-administration/running-vuln-scan) for more information.
* **Scan with BlueApp**: This option enables you to run an asset scan through an BlueApp. See [Running Asset Scans Using a BlueApp](/documentation/usm-anywhere/user-guide/asset-management/asset-administration/scan-with-alienapp) for more information.
* **Configuration Issues**: This option opens the Assets Details page. The Configuration Issues tab is selected in the page. See [Viewing Assets Details](/documentation/usm-anywhere/user-guide/asset-management/asset-administration/viewing-asset-details) for more information.
* **Vulnerabilities**: This option opens the Assets Details page. The Vulnerabilities tab is selected in the page. See [Viewing Assets Details](/documentation/usm-anywhere/user-guide/asset-management/asset-administration/viewing-asset-details) for more information.
* **Alarms**: This option opens the Assets Details page. The Alarms tab is selected in the page. See [Viewing Assets Details](/documentation/usm-anywhere/user-guide/asset-management/asset-administration/viewing-asset-details) for more information.
* **Events**: This option opens the Assets Details page. The Events tab is selected in the page. See [Viewing Assets Details](/documentation/usm-anywhere/user-guide/asset-management/asset-administration/viewing-asset-details) for more information.

You can configure the view you want for the list of alarms. See [Alarms Views](/documentation/usm-anywhere/user-guide/alarms/views) for more information.

Click **Generate Report** to open the Configure Report dialog box. See [Create an Alarms Report](/documentation/usm-anywhere/user-guide/alarms/exporting-alarms) for more information.

Click the <img src="https://mintcdn.com/levelblue-5324744e/uqtP2tfM8-NCdKud/images/usm-anywhere/line-chart.svg?fit=max&auto=format&n=uqtP2tfM8-NCdKud&q=85&s=663f531dddff8e4cdfcab73523d2695d" className="inline m-0" width="24" height="24" data-path="images/usm-anywhere/line-chart.svg" /> icon to change the graph to a Count/Time, MITRE ATT\&CK (Adversarial Tactics, Techniques, and Common Knowledge) or Alarms Strategies by Intent view. See [Alarms List View](/documentation/usm-anywhere/user-guide/alarms/alarms-list-view) for more information.

Click the <img src="https://mintcdn.com/levelblue-5324744e/9HhQ6wK11ydctaHc/images/usm-anywhere/star.svg?fit=max&auto=format&n=9HhQ6wK11ydctaHc&q=85&s=4d1a6bd0bae4ddca5266b4f7253ab290" className="inline m-0" width="20" height="20" data-path="images/usm-anywhere/star.svg" /> icon to bookmark an item for quick access.

<Note>
  You can view your bookmarked items by going to the secondary menu and clicking the <img src="https://mintcdn.com/levelblue-5324744e/9HhQ6wK11ydctaHc/images/usm-anywhere/star.svg?fit=max&auto=format&n=9HhQ6wK11ydctaHc&q=85&s=4d1a6bd0bae4ddca5266b4f7253ab290" className="inline m-0" width="20" height="20" data-path="images/usm-anywhere/star.svg" /> icon. This will display all of your bookmarked items and provide direct links to each of them.
</Note>

Click the <img src="https://mintcdn.com/levelblue-5324744e/7_UE4nawuffikKei/images/usm-anywhere/filter.svg?fit=max&auto=format&n=7_UE4nawuffikKei&q=85&s=67923558effcceefdf36484f55003cfa" className="inline m-0" width="20" height="20" data-path="images/usm-anywhere/filter.svg" /> icon to filter your search by row fields. See [Filtering Alarms by Row Fields](/documentation/usm-anywhere/user-guide/alarms/searching-alarms#FilteringRowFields) for more information.

You can choose the number of items to display by selecting **20**, **50**, or **100** below the table. You can classify some columns by clicking the icons to the right side of the heading. You can sort the item information in ascending or descending order.
