Documentation Center
AlienVault® USM Anywhere™

Viewing Event Details

  Role Availability   Read-Only   Analyst   Manager

The eventAny traffic or data exchange detected by AlienVault products through a Sensor, or through external devices such as a firewall. details page provides in-depth information on events.

To view the details of an event

  1. Navigate to ACTIVITY > EVENTS.
  2. Click the event to display its details.
  3. Click the star symbol to the left of an item to mark it as a bookmark for quick access. Clicking the Star icon () on the secondary menu shows the bookmarked items and a link to them.

    The Event Details page includes event management functions that are supported for your assigned user roleTasks and responsibilities based on job description and position within an organization. A user's role is often used to define access to functionality and privileges to perform specific tasks and operations.

    You can see the event details, then the source, the destination, the payloadContents of the application layer of a packet triggering the security event., and the log. The chevron icon () located next to the Source and Destination fields allows you to access to several options, see Asset List View. In addition you have these 2 options

    • Add to current filter. This option allows you to add the asset to the selected filters.
    • Add asset to system. Use this option to create the asset, see Adding Assets.
  4. Click the previous and next buttons, located in the upper right-hand corner, to navigate between items.
  5. Click the close icon () to close this popup window.