134
U
E
SING THE
VENT
Using the Event
Viewer Interface
Using the Toolbar
Using the Right-Click
Menu Options
V
IEWER
This section provides information on using the Event Viewer interface including:
Using the Toolbar
•
Using the Right-Click Menu Options
•
Using the toolbar, you can access the following options:
Table 6-1 Toolbar Options
Option
Using the right mouse button (right-click), you can access the following options:
Table 6-2 Right-Click Options
Button
View Offense
Description
Allows you to perform advanced searches on events including:
Edit Search - Allows you to perform a search.
•
Quick Searches - Allows you to perform previously saved
•
searches. This option only appears when you have saved
search criteria.
For more information, see
Allows you to save the current search criteria.
Displays the offenses that the selected event has been correlated
to. Any event that has an associated offense is noted by a red icon
in the first column. See
Opens the False Positive Tuning window, which allows you to tune
out events that are known to be false positives from creating
Tuning False Positives
offenses. See
Allows you to configure custom event rules. For information on
rules, see the STRM Administration Guide.
Allows you to perform the following actions:
Show All - Removes all filters on search criteria and presents
•
all events.
Print - Allows you to print the events displayed in the window.
•
Export to XML - Allows you to export events in XML format.
•
Exporting Events
See
Export to CSV - Allows you to export events in CSV format.
•
Exporting Events
See
Allows you to display events grouped by criteria specified in the
drop-down list box.
Description
Displays the offenses that the selected event has been correlated
to. Any event that has an associated offense is noted by a red icon
in the first column. See
STRM Users Guide
Searching Events
.
Viewing the Associated Offense
.
.
.
Viewing the Associated Offense
.
.