Symantec 10521146 Administration Guide - Page 202

202 Monitoring Managing incident and event data Selecting columns The Network Security console provides a way to adjust the view by selecting which columns the Network Security console displays. ■ See "Selecting incident columns" on page 202. ■ See "Selecting event columns" on page 203. Selecting incident columns Not all incidents contain data in every category, so you may want to remove empty columns or add others to customize the display. All users can modify the display of incident data by selecting columns. To customize the incident columns 1 On the Incidents tab, in the upper Incidents pane, click Columns. 2 In Table Column Chooser, do one of the following: ■ Click Select All to display all columns. ■ Click the individual columns that you want to view. 3 Click OK to save and close. The Incidents tab can display the following incident data: ■ Last Mod. Indicates the date and time when Symantec Network Security Time last modified the incident record. ■ Name Indicates the user group of the current user. ■ Severity Indicates the severity level assigned to the incident. An incident's severity is a measure of the potential damage that it can cause. ■ Source Indicates the IP address of the attack source. If the source is made up of multiple addresses, then the Network Security console displays (multiple IPs) and you can view the list of addresses by double-clicking the event to see Event Details. ■ Destination Indicates the IP address of the attack target. If the destination is made up of multiple addresses, then the Network Security console displays (multiple IPs) and you can view the list of addresses by double-clicking the event to see Event Details. ■ Event Count Indicates the total number of events associated with this incident that have been logged to the database.