Filter
Top Products
66-24
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 66 Viewing Events
Preparing for Event Management
The time range of the events displayed in the event table is determined by the selected time interval.
For more information, see Selecting the Time Range for Events, page 66-39.
The following table explains the pagination controls to the right of the time slider.
Event Details Pane
The Event Details pane (illustrated in Event Monitoring Window, page 66-12) presents information
contained within a single event. The information, which is displayed in multiple tabs within the pane,
varies according to the richness of the event and the capability of Event Viewer to parse the data.
Components include:
• Displayed Fields Tab—Displays the fields shown in the Event Table.
• Details Tab—Displays all available fields for the selected event. The fields are presented in
alphabetical order.
• Explanation Tab—Displays a generic explanation for this event type.
• Related Threats Tab—Displays threats correlated to the event. (IPS Events only.)
• Recommended Action Tab—Displays a generic recommendation for an event of this type. (Syslogs
only.)
• Trigger Packet Tab—Displays trigger packet data. (IPS Events only.)
• Context Packet Tab—Displays context packet data from the Source (Attacker) and Destination
(Target). (IPS events only.)
Preparing for Event Management
Before you can view events generated from a device, you must configure the device to work with Event
Viewer.
Table 66-7 Time Slider Paging Controls
Element Description
Previous page (earlier) and next page (later). The size of page varies according to
the selected time mode.
Note Using the page controls alternately, for example forward and then back,
causes the sort order in the event table to reverse. That is, the latest events
go from the top of the table to the bottom, or from the bottom to the top.
First page (earliest) and last page (most recent).
Zoom in (smaller total time interval shown) and zoom out (greater time interval
shown).
Zooming does not change the content of the event table. A shaded blue area
indicates the time interval currently displayed in the event table.