Historical Graph View for Events Collected from an Event Source

Note:  This view has been deprecated. To manage Event Sources, use the netwitness_adminicon_25x22.png (Admin) > Event Sources view. For details, see "About Event Source Management" in the NetWitness Event Source Management Guide.

 

The Historical Graph view for events collected from an event source provides a visualization of historical data. To access this view:

  1. Go to netwitness_adminicon_25x22.png (Admin) > Health & Wellness.

    The Health & Wellness view is displayed with the Monitoring tab open.

  2. Click Event Source Monitoring.

    The Event Source Monitoring view is displayed.

  3. In the Historical Graph column, select netwitness_histgraph.png.

    The Historical graph for the selected event source type is displayed in a popup window.

    The figure displays the events collected from the event source type winevent_snare.

    netwitness_histgraphwinev_750x425.png

You can customize the graph as required. The table lists the various parameters used to customize the historical graph.

Parameter Description
Time Frame Select the time frame for which you want to view the historical data. The available options are: Current Day, Current, Week, Current Month.
From <date> To <date> Select the date range for which you want to view the historical data.

You can zoom in for a detailed view of the data in the Historical graph.

Zoom In Function 1 and 2

You can select one of the values to view the historical data for the selected value. The figure below displays an example for the 6h frame selected for zoom in. The slider bar at the right bottom corner is also changed to a 6h window.

Alternatively, you can slide the bar in the right hand corner to zoom in to a required frame.

Zoom In Function 3

You can click and drag in the plot area to zoom in for a required frame of time.