To view information about an event:
The event table is displayed.
The event details window opens.
The Event details area appears in the right part of the web interface window and contains a list of the event's parameters with values. In this area you can:
This is available when integrated with Kaspersky Threat Intelligence Portal.
You can also link an event to an alert if the program is in alert investigation mode and open the Correlation event details window if the selected event is a correlation event.
In the Event details area, the name of the described object is shown instead of its ID in the values of the following settings. At the same time, if you change the filtering of events by this setting (for example, by clicking to exclude events with a certain setting-value combination from search results), the object's ID, and not its name, is added to the SQL query: