AlienVault® USM Anywhere™

Viewing Your Box Events

Role Availability Read-Only Analyst Manager

After the USM Anywhere Sensor collects the first Box activity and USM Anywhere normalizesNormalization describes the translation of log file entries received from disparate types of monitored assets into the standardized framework of Event types and sub-types. the raw data, these eventsAny traffic or data exchange detected by AT&T Cybersecurity products through a sensor, or through external devices such as a firewall. start appearing in Activity > Events. To provide a more focused view of these events, the Box dashboard is available under Dashboards in the top navigation menu.

This dashboard summarizes the events originating from your Box environment so that you see what's going on at a glance. Click items displayed in the data elements to drill down to the list of events. These are the widgets found in the dashboard:

  • Top Events
  • Box Activity
  • User Activity
  • Top File Names
  • Login by Country
  • Top Users with Failed Logins

Review events orginating from your Box environment