RSA Admin

Device Activity by Event Category

Discussion created by RSA Admin Employee on Feb 29, 2008
Latest reply on Dec 24, 2010 by snjy.in

Attached is a Event Explorer Display Method that summarizes activity for all devices of a certain class. This is useful to get a quick view of all activity in an environment and use the filter capability to isolate specific classes of devices like IDS/IPS systems or OS.

 

To install,

1. Save the file to the EE client HDD

2. Go to the Tools --> Import menu

3. Point to the .eec file

 

The display will be added to your Display list, feel free to customize and upload any good variations.

 

Sean

Outcomes