000031703 - How to enable continuous Events view in RSA Security Analytics 10.5.1

Document created by RSA Customer Support Employee on Jun 14, 2016•Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 5Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000031703
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: Security Analytics UI
RSA Version/Condition: 10.5.1.0
Platform: CentOS
O/S Version: EL6
IssueAccording to the Security Analytics 10.5.1 Release Notes, the continuous Events view should now be supported. However, I do not see how to enable this new option.
ResolutionFollow the steps below to enable the continuous Event view:
Navigate to Profile -> Preferences -> Investigation -> Investigation tab and check the 'Append Events in Events Panel' box.
 

User-added image

 

Afterwards, when viewing the event pages, the events will be appended in the current view.

User-added image
User-added image
User-added image

Attachments

    Outcomes