Select the event whose information you want to view.
The event details window opens.
The Event details area appears in the right part of the web interface window and contains a list of the event's parameters with values. In this area you can:
Include the selected field in the search or exclude it from the search by clicking or next to the setting value.
Click a file hash in the FileHash field ещ open a list in which you can select one of the following actions:
An event was sent with multiple non-empty fields, such as Message, SourceAddress, DeviceCustomString1.
A query was executed for a set of fields.
SELECT Type, Message
FROM `events`
ORDER BY Timestamp
DESC LIMIT 250
Clicking an event opens the Event Information window with the following information:
The Type and Message fields from the query.
The default TenantID and Timestamp fields not specified in the query are displayed.
Non-empty SourceAddress and DeviceCustomString1 fields of the event that are missing from the query but are present in the sent event are not displayed.
If you want to view all non-empty fields, click View all event fields.
This displays all non-empty fields of the event: Type, Message, TenantID, Timestamp, SourceAddress, DeviceCustomString1.
Change the display of the event by clicking the Format button. By default, the event is displayed as a one-line string in XML or JSON format. When you click this button, the event is displayed in multi-line format with indentation. Clicking the button again reverts the display to the one-line format. Formatting is applied to all events in the table in the Events section.
In the Event details area, the name of the described object is shown instead of its ID in the values of the following settings. At the same time, if you change the filtering of events by this setting (for example, by clicking to exclude events with a certain setting-value combination from search results), the object's ID, and not its name, is added to the SQL query: