Table of Contents
Advertisement
3 Click Severity icon. The Select Severity Values window displays.
4 Select one or more values for Severity and click OK.
5 Select a From and To date and time.The time you select corresponds your system time.
6 Select a batch size. The events queried display in the batch size you specify.
If you select a batch size of 100, the first 100 events are displayed in the window. After the
query is processed, the Begin Searching icon changes to the More results icon. You can see next
100 events along with the previous events by clicking the More results icon.
7 Click the Begin Searching icon. The query is processed. You can cancel the search by clicking
the Cancel search icon.
TIP: Select HTML or CSV from the drop-down list to export query results.
3.9.4 Active Browser
The Active Browser provides the ability to browse through a selected set of data to look for patterns
and perform investigation. You can view the selected events in the Active Views in the Active
Browser. When you open the Active Browser using Analysis > Offline Query and click Browse
against a specific offline query, the events table is displayed only when the number of events is less
than or equal to1000.
68
Sentinel 6.1 Rapid Deployment User Guide
Advertisement
Table of Contents
