Detections: Sort suricata rules by category

[security-companion]

Hi,
I noticed that some suricata rules have severity unknown.
From my understanding in this case the severity is derived from the classification of a specific rules as defined in https://github.com/Security-Onion-Solutions/securityonion/blob/ace6c5c9e4118653c83f414b4a7b0147672acd64/salt/suricata/classification/classification.config
So my question is if it is possible to sort and filter in detections by the classification/classtype (eg. all having value attempted-user) or even better by the value assigned to the classification in classification.config

Best regards
security-companion

[dougburks]

Have you tried the following query in Detections?

"classtype:attempted-user"

[security-companion]

Hey,
thank you very much, that worked.
Greetings