Use routed events
Routed events focuses on triggered events, including attack alerts, FMB and ABM anomalies, and configuration changes, and provides details on them.
The list contains all the events that occurred in the selected time period with overview information like severity, first and last seen dates and times, configuration, IP addresses, and a summary.
On the right side of the screen the time line for events shows you when they occured. Click on the icons at the top to filter out specific events.
In the list on the left, you can click on an event to display the details. The specific details provided vary depending on what type of event you’re viewing. For example, if you’re viewing details for an attack event, you’ll see a number of graphs representing pre- and post-mitigation BPS and PPS, as well as peaks, Mbps, and kbps by scrubbing center location.