Quick Start
1 4
Section 14.1, "Security Analysts," on page 307
Section 14.2, "Creating Incidents," on page 310
Section 14.3, "iTRAC," on page 312
Section 14.4, "Report Analyst," on page 325
Section 14.5, "Administrators," on page 326
14.1 Security Analysts
NOTE: This document assumes your Security Administrator has built the necessary filters and
configured Collectors for your system.
14.1.1 Active Views Tab
In the Active Views tab, you can monitor events as they happen, performing queries on these events.
You can monitor them in a table form or through a 3-D graphical representation.
To get a Real-Time events started:
1 Go to the Active View tab.
2 Click Active Views > Create an Active View, select a filter from the Filter drop-down menu
and click Select.
14
Quick Start
307