Switching to the network map to display event information

You can configure the network map to display nodes and links based on information saved in events. The nodes displayed on the network map are determined by the address information of the sources and destinations of network packets in the selected events. The displayed links are filtered based on the time of communications, beginning with the date and time of registration of the first event among the list of selected events.

The capability to display nodes and links on the network map is available if no more than 200 events are selected in the events table (including among the selected incidents).

To configure the network map to display nodes and links based on information in events:

1. Select the Events section.
2. In the events table, select the events and/or incidents for which you want to display nodes and links on the network map.

   The details area appears in the right part of the web interface window.

3. Click the Show on network map button (this button is unavailable if there are more than 200 events selected).

The Network map section opens. The network map displays nodes and links based on information in the selected events (initial filtering by event will be applied). If you select an incident in which events are still being added, the network map will also display nodes and links based on information in the new events.

Page top