Working with events

In the Events section of the KUMA Core web interface, you can inspect events stored in the Storage cluster to investigate security threats or create correlation rules.

This section displays only filtered events. You can update the displayed event selection to display the most recent entries by refreshing the web page or by setting the events table refresh period.

Events can be analyzed retrospectively.

The displayed date and time format depend your machine's locale. In the English version, the first day of the week is Sunday.

In this Help topic

Filtering events

Viewing event detail areas

Exporting events

Selecting Storage

Getting events table statistics

Configuring the table of events

Refreshing events table

Opening the correlation event window

Page top