Viewing Events
Once you have found an event, you can view it by sending the event to an Object Details Viewer widget.
When an event is open in the Object Details Viewer, its information is organized across multiple tabs. Each tab provides a different view of the event or enables specific actions.
-
Details: Displays the event’s data fields and their values.
-
Collections: Shows the collections the event belongs to and allows you to add or remove the event from collections.
-
Attachments: Displays any attachments associated with the event.
-
Drilldown: Visualizes the event's provenance, showing the patterns and contributing signals that explain how and why the event was generated.
-
Link Analysis: Displays relationships between the event and other entities or events in a network-style view.
-
Map: Visualizes geospatial data associated with the event, when location information is available.
-
Event History: Shows a historical view of changes to the event, such as risk score updates over time.
The tabs available for an event may vary. Some tabs only appear when the required underlying data is present on the event.