View event details

In the Threat Events report, you can view detailed information about confirmed or suspected events. If Enterprise Security Connector is configured in your organization, you can also view event details that are associated with Security Connector events in the Security Connector activity report.

How to

  1. For threat or access control events, in the navigation menu, select Monitoring > Events. Depending on the type of events you want to view, click the Threat Events or the Access Control tab.
    Note: If you are trying the new Enterprise Center interface, in the navigation menu, select Threat Analytics > Events. Select the event type.
  2. For Security Connector events, in the navigation menu, select Monitoring > Activity. Click the Security Connector tab.
    Note: If you are trying the new Enterprise Center interface, in the navigation menu, select Threat Analytics > Activity > Security Connector.
  3. Filter events as needed. For more information see Filter data based on date and time and Filter event data.
  4. If you haven’t done so already, select a dimension.
  5. In the list of grouped events, click the arrow icon that is associated with a dimension value. For example, if you selected Domain, click the arrow icon to see the associated events. Events appear in a table format.
  6. Click the information button. An Event Details window appears with more information.
    You can use the arrow keys on your keyboard to navigate to other events in the events table and show details for the new selected event.