8e6 Technologies TAR HL/SL/MSA manual View Child Gauges, Time Span, Threat Level

CHAPTER 2: DRILL DOWN INTO A URL GAUGE STEP 2: VIEW CHILD GAUGES

Time Span

Each gauge monitors events in real-time for a window of time between one and 60 minutes. This time span is customizable by the administrator. For example, if a gauge is set for 15 minutes, that gauge will indicate the number of page hits for the last 15 minutes of time. For example, if the current time is 12:00, the gauge score will reflect all activity from 11:45 to 12:00. Once the time is 12:01, the gauge will reflect all activity from 11:46 to 12:01.

Threat Level

The colored threat level indicates the current state of threat based on the custom- izable ceiling created by the administrator. For example, if the administrator creates a gauge with a threshold of 100, when the score reaches 67 the gauge dial will move into the red section of the dial and the score number will turn red and begin to flash. These gauges are designed to provide an intuitive reminder when a specific category gauge is experiencing abnormal levels of activity so the adminis- trator can react quickly.

Step 2: View Child Gauges

Sometimes a single child gauge is responsible for driving a parent gauge’s score. To view child gauges, you can either double-click the parent gauge or right-click the parent gauge and then select “View Gauge Details”. In this example, select the “Security” gauge.

Select the Security parent gauge

Performing either of the two aforementioned actions on this parent gauge will open a window containing all child gauges associated with that gauge.

8E6 TECHNOLOGIES, THREAT ANALYSIS REPORTER EVALUATION GUIDE 5