Managing Events

This section explains how to configure event behavior and presentation in Workstation. These settings determine which events are available to analysts, how they appear in the UI, and how users are notified about important activity.

1. Ingesting Events: Control which event types are ingested into Workstation and made available to analysts.
2. Deleting Events: Remove entire sets of events from Workstation when they are no longer needed.
3. Event Icons, Colors, and Titles: Define the titles, icons, and colors used to visually distinguish different event types in the UI.
4. Event Templates: Configure how event data fields are organized and displayed when viewed in an Object Details Viewer.
5. Event Notifications: Configure notifications that draw analyst attention to important system actions, events, or conditions.