Download correlated threat events to a CSV file

When viewing correlated threat events from the Security Connector events tab, you can download threat event data to a CSV file.

How to

  1. In the navigation menu, select Monitoring > Activity. Click the Security Connector tab.
    Note: If you are trying the new Enterprise Center interface, in the navigation menu, select Threat Analytics > Activity > Security Connector.
  2. Filter events as needed. For more information see Filter data based on date and time and Filter event data.
  3. If you haven’t done so already, select a dimension or event criteria.
  4. In the grouped events area, click the arrow icon to show the events associated with a dimension value.
  5. Locate an event that shows View in the Correlated Threat Event column. Do one of following:
    • In the Correlated Threat Event column, click View. The events appears in the Correlated Threat Events for Security Connector Event dialog.
    • Select the data that you want to report and click Threat Events. The events appears in the Correlated Threat Event(s) by Filtered Dimensions dialog.
  6. Click the download icon. The event or events data downloads to a CSV file.