Viewing Threat Event Logs

Logs > Threat Event Logs

Run a query to find more or specific information about the endpoint threats or actions taken by Threat Mitigator.

To query the logs:

1. Click Logs on the main menu. The drop-down menu displays.

2. Click Threat Event Logs from the drop-down menu. The Threat Event Logs screen displays.

3. Select a time period for the query:

• By default, the All days option time period appears in the selection.

• By default, the date and time of the most recent logs appear in the From and To fields. Accept the defaults or select beginning and ending dates from the drop-down menu or the From and To fields.

• Select beginning and end dates from the From and To fields by clicking on the calendar icon next to each field () and the individual date. The date you clicked appears in the respective From or To field in the correct format.

4. Click the More search criteria link. Additional detailed input fields appear.

5. Refine your search by selecting any combination of the following:

6. IP address (or range)

7. Host name

8. Threat event

9. Data source

10. Mitigation status

6. Select the number of logs per page that you want to display.

7. Click Search. A Query Result table appears.

8. Click Export to CSV.

See also:

• Threat Event Logs

• Rolling Back Mitigation Action