Figure 46 Top 10 attack events contrast graph

You can click the link to export all the analysis reports that the event overview function provides.

CAUTION:

Logs are aggregated at 3 o’clock every day. When you query event information of the current month, the system displays only the data collected from the first day of the month to the day before the current day.

Event details

The Firewall Manager provides the powerful query function, which helps you quickly find the desired security event information from history data of months.

Configuration guide

From the navigation tree of the firewall management component, select Event Details under Event Analysis to enter the attack event details page, as shown in Figure 47. This page allows you to query attack events by event name, type, severity, source IP, destination IP, destination port, and protocol to view the event details. Table 54 describes the event details query options. Table 55 describes the fields of the attack event details list.

47