Skip to main content

Investigate Using Cyber Shield Top 10 Dashboard

Abstract

Investigate the source of Cyber Shield Domain and Traffic Filtering events using the Top 10 Dashboard — drill down from category to top users to top devices with breadcrumbs, filtered by period, filtering type, and event mode.

Overview

Use the Top 10 Dashboard to drill down into Cyber Shield events and identify the Users, Devices, Networks, Hosts, or Connectors associated with Domain Filtering or Traffic Filtering activity.

The drill-down path begins with a category and lets you investigate increasingly specific event sources. Breadcrumbs show your current drill-down level and let you return to a previous level.

The results reflect the selected period, filtering type, and mode.

For more information about the dashboard controls and views, refer to Interact With the Top 10 Dashboard.

Investigate Cyber Shield events

  2. Navigate to Shield → Overview.

  3. Scroll to the Top 10 Dashboard.

  4. Select the Period, Filtering Type, and Events for the activity you want to investigate.

    • The Top 10 Dashboard displays the top categories matching your selections.

  5. Review the Top 10 categories.

    • The visualization displays the relative event activity for each category. The category list shows each category's event count and share of the matching events.

  6. Select a category from the visualization or category list to drill down into its events.

    • The dashboard displays the top 10 users, networks, or hosts associated with the selected category.

  7. Select a User, Network, or Host to drill down further.

    • The dashboard displays the top devices associated with the events.

  8. Use the breadcrumbs to move between levels in the drill-down path or return to the category view.

Continue your investigation in Metrics

Use View All when you want to investigate events beyond those displayed in the Top 10 Dashboard.

  1. Select the Period, Filtering Type, and Events for the activity you want to investigate.

  2. Drill down into a category, if applicable.

  3. Select View All.

    • CloudConnexa opens Metrics with the selected period and filters. If you drilled down into a category, the selected category is also applied to the Metrics view.

For more information, refer to:

In this section:
See also: