1.3 Managing Data in the Events Dashboard

The dashboard allows you to filter, group, and sort events and displays event details.

1.3.1 Filtering and Grouping Event Data

In the Events Dashboard, the chart displays the total number of users that contributed to event with a severity, the number of assets on which the event was triggered, the kind of change that triggered the event, and the policies that the events violated.

You can narrow your search by filtering the events by application type, severity, time, and so on. To group the event by users, change category, or by an event attribute, go to REPORTS > Event Report > Events Summary.

1.3.2 Viewing Event Details

You can view who triggered an event, where the event was generated from, what are the changes made. Besides these details you can view the severity, the policy that was violated, the domain in which the change occurred. To view every detail of an event, go to REPORTS > Event Report > Events Summary and click on a event row. This opens the Event Details page.

NOTE:For AWS Identity and Access Management (IAM), the target host displays the AWS region name, which is the domain name for AWS IAM.

You can manipulate the Events Summary by adding or removing columns to the view. You can export the view to a .csv file. Similarly, you can set a new time range to filter events by.