Monitoring events via Kaspersky Security Center

In Kaspersky Security Center, information about events of Kaspersky Industrial CyberSecurity for Networks is displayed in the following columns of the events table:

• Time or Event occurred means the Kaspersky Industrial CyberSecurity for Networks event registration time in the time zone of the computer where Kaspersky Security Center is installed.
• Device means the name of the managed device in Kaspersky Security Center (the computer on which Kaspersky Industrial CyberSecurity for Networks Server is installed).
• Event means the name of the Kaspersky Security Center event type defined for events of Kaspersky Industrial CyberSecurity for Networks.
• Description means the title and brief description of the Kaspersky Industrial CyberSecurity for Networks event.
• Group or Administration group is the name of the administration group that contains the computer hosting the Kaspersky Industrial CyberSecurity for Networks Server in the Managed devices folder in the Kaspersky Security Center Administration Console tree.
• Application means the application name (Kaspersky Industrial CyberSecurity for Networks).
• Version number means the application version number.
• Importance level or Severity level means the importance level of the event based on how importance is typified by Kaspersky Security Center.
• Registered or Event registered means the time at which the event was registered in the Kaspersky Security Center database.

The parameter values of events relayed from Kaspersky Industrial CyberSecurity for Networks are displayed according to the localization settings of Kaspersky Industrial CyberSecurity for Networks. The localization language of Kaspersky Security Center is disregarded for these parameters.

If a Kaspersky Industrial CyberSecurity for Networks event contains information about multiple network interactions, this event is converted into separate items of the Kaspersky Security Center events table. This way, individual events are created in Kaspersky Security Center for each network interaction specified in a Kaspersky Industrial CyberSecurity for Networks event.

To have events of Kaspersky Industrial CyberSecurity for Networks displayed in the Kaspersky Security Center events table:

1. Make sure that the required components are installed in Kaspersky Industrial CyberSecurity for Networks and Kaspersky Security Center.
2. Make sure that the port used for connecting to the computer hosting Kaspersky Security Center is open and accessible on the computer hosting the Kaspersky Industrial CyberSecurity for Networks Server.
3. When configuring the Network Agent policy settings in Kaspersky Security Center, enable saving of relevant events to the Administration Server database and define the event retention period.

   You can configure event registration and retention in the Network Agent policy settings when working in the MMC-based Administration Console or when working in Kaspersky Security Center Web Console.

4. In Kaspersky Industrial CyberSecurity for Networks, configure forwarding of events through the Kaspersky Security Center Connector.

When the specific event types are registered in Kaspersky Industrial CyberSecurity for Networks, these events will also be displayed in the Kaspersky Security Center events table.

In this section: Event types in Kaspersky Security Center for Kaspersky Industrial CyberSecurity for Networks events Correspondence of Kaspersky Security Center event severity levels

Page top