Overview
Note: This view is being deprecated. To manage Event Sources, see About Event Source Management in the Event Source Management Guide.
The Historical Graph view for events collected from an event source provides a visualization of historical data. To access this view:
-
In the Security Analytics menu, select Administration > Health & Wellness.
The Health & Wellness view is displayed with the Monitoring tab open.
-
Click Event Source Monitoring.
The Event Source Monitoring view is displayed.
-
In the Historical Graph column, select
.
The Historical graph for the selected event source type is displayed.
The figure displays the events collected from the event source type winnt_nic.
Features
You can customize the graph view as required. The table lists the various parameters used to customize the historical graph view.
Parameter | Description |
---|---|
Time Frame | Select the Time Frame for which you want to view the historical data. The available options are: Current Day, Current, Week, Current Month. |
From <date> To <date> | Select the date range for which you want to view the historical data. |
You can zoom in for a detailed view of the data in the Historical graph.
The following figure displays the various zoom functions available.
Zoom In Function 1 and 2
You can select one of the values to view the historical data for the selected value. The figure below displays an example for the 6h frame selected for zoom in. The slider bar at the right bottom corner is also changed to a 6h window
Alternatively, you can slide the bar in the right hand corner to to zoom in to a required frame.
Zoom In Function 3
You can click and drag in the plot area to zoom in for a required frame of time.
The figures below display an example of selecting a 5 minute frame and the displaying data in the 5 minute frame.