Displaying event information on the network interactions map
You can configure the network interactions map to display nodes and links based on information saved in events. The nodes displayed on the network interactions map are determined by the address information of the senders and recipients of network packets in the selected events. The displayed links are filtered based on the time of communications, beginning with the date and time of registration of the first event among the list of selected events.
The capability to display nodes and links on the network interactions map is available if no more than 200 events are selected in the events table (including among the selected incidents).
To configure the network interactions map to display nodes and links based on information in events:
- Select the Events section.
- In the events table, select the events and/or incidents for which you want to display the nodes and links on the network interactions map.
The details area appears in the right part of the web interface window.
- Click the Show on network map button (this button is unavailable if there are more than 200 events selected).
The Network map section opens. The Network interactions map tab displays nodes and links based on information in the selected events (initial filtering by event will be applied). If you select an incident in which events are still being added, the network interactions map will also display nodes and links based on information in the new events.
