Reports Of Top Events - Symantec 10521146 - Network Security 7120 Administration Manual

Administration guide
Hide thumbs Also See for 10521146 - Network Security 7120:
Table of Contents

Advertisement

Reports of top events

Symantec Network Security generates the following top-level event reports:
Table 9-1
Types of top-level event reports
Type
Description
Top event types
The Top Event Types report lists the event types, such as
Synflood, Telnet DoS and Portscan, that occurred most frequently
during the specified time period, and the number of times each
event type occurred.
Also specify the maximum number of unique event types to
display. For example, generate a report on the top 10 unique
events or top 100 unique events. To view the number of times any
event type occurred, hover the cursor over the event. Symantec
Network Security generates the Top Event Types report in the
table, pie chart and bar chart formats.
You can generate several drill-down reports for each event type
listed in the Top Event Type report.
Top event
The Top Event Destinations report lists the most frequently
destinations
occurring destination IP addresses of detected events.
However, the top event destinations do not necessarily map to the
top event types. You must specify the report start and end
date/time, and number of unique addresses to display. For
example, you could generate a report on the top 10 addresses or
top 100 addresses. Symantec Network Security generates the Top
Event Type report in the table, pie chart and bar chart formats. To
view the number of times an IP address was an event destination
during the report time period, hover the cursor over the table row,
pie piece, or bar corresponding to the event destination. You can
generate several drill-down reports for each event type listed in
the Top Event Destinations report.
Top event sources
The Top Event Sources report lists the IP addresses that were
most frequently the source addresses of detected events.
You specify the report start and end date/time, and the maximum
number of unique addresses to display. Symantec Network
Security generates this report in the table, pie chart and bar chart
formats. To view the number of times an event source occurred
during the report time period, hover the cursor over the table row,
pie piece or bar corresponding to the event source. You can
generate several drill-down reports for each event type listed in
the Top Event Sources report.
Reporting
About top-level report types
231

Advertisement

Table of Contents
loading

This manual is also suitable for:

Network security

Table of Contents