Investigate: Event Query; Investigate: Graph Mapper - Novell SENTINEL RAPID DEPLOYMENT 6.1 - 12-2009 User Manual

3.9.1 Investigate: Event Query

This function allows you to perform an event query within the last hour for events similar to the
selected event.
1 In a Navigator or Snapshot window, right-click an event, click Investigate, and select one of
three options given below:
Option
Show More Events to this target
Show More Events from this source
What are the target objects of this event?
An event table opens, showing the chosen event information.

3.9.2 Investigate: Graph Mapper

To create a graph map:
1 In a Real Time Event Table, right-click an event or events and select Investigate >Show Graph.
The following is a graphic depiction of Sensor Name to Event Name of severity 5 in an organic
format. You can view a graphic mapping in the following formats:
Circular
Hierarchical
Organic
Orthogonal
66 Sentinel 6.1 Rapid Deployment User Guide
Function
Events with the same destination IP address
Events with the same initiator IP address
Events with the same event name as the
selected event