Displaying attack event details, Configuration guide – H3C Technologies H3C SecCenter IPS Manager User Manual
Page 53
47
Figure 47 Top 10 attack events analysis
On the page, you can perform the following operations:
•
Click the
link to export all the analysis reports that the event analysis function provides in
an excel file.
•
Click the
link to export all the analysis reports in a Word file.
NOTE:
Logs are aggregated at 3 o’clock in the morning every day. When you query event information of the
current month, the system displays only the data collected from the first day of the month to the day before
the current day.
Displaying attack event details
The IPS Manager provides the powerful query function, which helps you quickly find the desired security
event information from history data of months. The event information can be exported as an HTML file,
an Excel file, and a Word file.
Configuration guide
From the navigation tree of the IPS management component, select Attack Event Details under Event
Analysis to enter the attack event details page, as shown in
. This page allows you to query
attack events by event name, type, severity, source IP address, destination IP address, destination port,
and protocol to view the attack event details.
describes the attack event query options, and
describes the fields of the attack event details.