Security Analytics Engine 1.2 - User Guide

Filtering data on the Administration web site

In order to aid users in locating specific information quickly and efficiently, the Security Analytics Engine provides column level filtering throughout the Administration web site. This column level filtering is often helpful when used alongside the other search capabilities provided on some of the Security Analytics Engine pages.

To filter data

Throughout the main pages of the Security Analytics Engine Administration web site, a button is located to the right of each column heading. This button is used to filter the data within the column in order to locate specific items.

1. Click the button to the right of a column heading.
2. An empty field replaces the column heading. In the field, enter a word or string of characters by which to filter the column data. The table updates automatically as you type to display items that contain that word or string of characters anywhere within the column.
3. Additional columns can be filtered using the same method in order to further narrow down the items appearing in the table. All filtering applied to the table remains in effect until removed.
4. To remove filtering, click the button to the right of the column heading to which filtering has been applied or refresh the page to reset the table to its default display settings.
5. The items in a column can also be sorted to help you locate a specific event. To sort the data:
   1. Click the button to the left of the column heading to be used for the sort criteria.
   2. The sort order is now in ascending order (), but can be changed to descending order by clicking the button a second time ().
   3. To remove the sort order from a column, click the button to remove the column sorting ().

Plugins

Topics:

Introduction to plugins

The Plugins page is used for configuring and managing plugins. Plugins are what the Security Analytics Engine uses to retrieve and store the analytic data that is used for performing condition checks and calculating risk scores. How the information in these plugins is used is then customizable for different risk policies by using conditions (see Conditions for more information.

Plugins page

The Plugins page is displayed when Plugins is clicked in the left pane of the Security Analytics Engine Administration web page. The Plugins page displays all the plugins available for the Security Analytics Engine and a description of each plugin.

The following button appears on the left top of this page:

This button is used for editing a plugin.

The following information is displayed for each plugin:

Type

Displays the type of plugin.

Description

Displays a short description of the plugin.