66-40
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 66 Viewing Events
Using Event Viewer
•To view events from a specific day, select is on and then select the date from the displayed calendar.
•To view events from a specific date and time range, select is between and select the first and last
days and times from the displayed calendars.
•To view real-time events, select Real Time.
Using the Time Slider with Filtering
You can use the vertical slider control in the time slider to change the start time for the events shown in
the event table. This is particularly useful when you want to locate events and you know the approximate
time they occurred.
For details on the operation of the time slider, see Time Slider, page66-23.
To use the time slider to aid filtering, follow these steps:
Step 1 Open an historical view, or use the Time Selector in the toolbar, or the View > Mode command, to select
an appropriate time range, such as Last 10 Minutes. For more information, see Selecting the Time Range
for Events, page 66-39.
Step 2 Move the vertical slider to the approximate time of the events you want to examine.
The event table is reloaded to display events on or before the time you specified with the vertical slider.
This time range is shaded in the time slider, and the length of time selected is based on the length of time
selected in the Time Selector (for example, 10 minutes for a Last 10 Minute view, or the same length of
time selected for an “is between” view). The time range is noted in the Time Selector control, for
example:
Step 3 To locate the events, you can now do any of the following:
•Apply custom column filters. See Creating Column-Based Filters, page 66-41.
•Use the quick filter to search on a text string. See Filtering on a Text String, page66-44.
•Scroll or page through the event table.
•Use the time slider paging controls to reset the time range forward or back. For more information,
see Time Slider, page 66-23.
Note The distance moved forward or back when paging in the time slider depends either on
the mode (time range) that is set or the number of events the event table can hold. The
position of the vertical slider denotes the most recent event loaded in the event table.
Refreshing the Event Table
When you are using an historical mode, such as “last 10 minutes,” the latest events displayed correspond
to the time you selected the time range or opened the view. Similarly, if you are in real-time mode and
have clicked Stop, the event table does not include events that arrived after you stopped the event stream.
To refresh the events listed in the event table, so that they are current with your selected time range, do
any of the following: