Overview Drill-down

The information provided on the Overview display is a summary of the current security events and workload of the security analyst team.

Any of the events, in any panel, on this display can be interrogated to provide a more in-depth insight into the issues.

Filters

The current filters applied to the display are shown in the Filters panel just below the menu bar. By default, the only filter that is applied is Only Open Events.

When additional filters are applied, by clicking on any of the Incidents, Threats and Highlighted events (or Security Control, Category and Tenant in the Events Review panel) in any of the panels, the new filter is displayed here.

When a filter is applied, the display changes to show the affect of the filter. The following example shows the affect on the display of applying a filter that just shows the current incidents.

With Only Open Events Applied:

Click on Incidents in the Summary panel to apply a new filter.

The display changes to show Only Open Events and Incidents.

All events on this page, regardless of panel, are now available for further drill-down into the detail by clicking on the relevant content.

Linking to Event Manager

When the Go to Event Manager option is selected from the Overview page, the filters that are currently in force are applied to the Event Manager view.

Therefore, using the above example, opening Event Manager at this point will result in just the four incidents being displayed in the Event Manager view.

Removing Filters

Filters can be removed by clicking on the 'X' symbol next to the Filter name in the Filters panel.

Once removed, the display changes to reflect the current filters still applied.

Resetting the Overview page

Following the drill-down into any of the information contained within each of the four panels on this display, use the Reset button that appears to reset the whole Overview page back to the default view.