Symantec 10521146 - Network Security 7120 Administration Manual page 118

118 Protection policies
Adjusting the view of event types
1. Set search parame-
ters to select event
types that match cer-
tain characteristics.
To adjust the view by searching for specific characteristics
1 In the Policies tab, do one of the following:
Click New > Search Events.
■
Select a policy, and click View > Search Events.
■
Select a policy, and click Edit > Search Events.
■
2 Provide some or all of the following search criteria:
In Event Name, enter a name.
■
In Protocol, select a protocol from the pull-down list.
■
In Category, select a category from the pull-down list.
■
In Severity, set a severity level from the pull-down list.
■
In Confidence, set a confidence level from the pull-down list.
■
In Intent, select an intention from the pull-down list.
■
In Blocked, specify whether you want to view events with blocking
■
rules.
In Logged, specify whether you want to view events with logging rules.
■
In Note, specify the contents of the Note to search for events
■
containing the specified contents.
3 Click Search Events.
Search Results displays the total number of items shown in the subset.
4 Click OK to save and exit.
Note: Remember that the policy still contains the full list of event types.
This search has provided a shorter, more manageable subset to view.
2. Click Logged and/or
Blocked to display event
types that have logging
or blocking rules.
3. Click Search Events
to display a manageable
subset of event types.