How to enable continuous Events view in RSA Security Analytics 10.5.1

[#1]

Article Number

000031703

Applies To

RSA Product Set: Security Analytics
RSA Product/Service Type: Security Analytics UI
RSA Version/Condition: 10.5.1.0
Platform: CentOS
O/S Version: EL6

Issue

According to the Security Analytics 10.5.1 Release Notes, the continuous Events view should now be supported. However, I do not see how to enable this new option.

Resolution

Follow the steps below to enable the continuous Event view:

Navigate to Profile -> Preferences -> Investigation -> Investigation tab and check the 'Append Events in Events Panel' box.
 

​Image description

Afterwards, when viewing the event pages, the events will be appended in the current view.

Image description
Image description
Image description