Symantec 10521146 Administration Guide - Page 229

Reporting 229 Reporting top-level and drill-down format. All users can navigate from one format to another by selecting one of the report formats listed in the drop-down menu in the upper right corner of the report window. About report types Reports listed in the Network Security console Reporting menu are top-level reports. In most top-level reports, you can also generate one or more levels of drill-down reports that provide a more focused level of detail. For example, you can generate an Events Per Day report and then select a particular day from the report for which to generate an Events Per Hour drill-down report. The drill-down report will break out that day's event count into 24 separate event counts-one for each hour of the day you selected. For any hour of that day, you can generate other drill-down reports, such as a Top Event Types report to view the types of events that occurred most frequently during that hour. Notice that many reports, such as Events Per Hour and Top Event Types, can be generated as both top-level Network Security console reports, and also as drill-down reports from within other top-level reports, or even from within other drill-down reports. For example, from the Events Per Month report, you can drill down to an Events Per Day report, and from there to an Events Per Hour report, but all of these reports can also be generated as top-level reports. Some reports are only available as drill-down reports. To view drill-down reports, right-click in the area of the report representing the data for which you want to generate a drill-down report. For example, right-click in a column, bar, pie piece, or table row. Then select a report type from the pop-up menu that appears. Symantec Network Security will generate the drill-down report based on the data related to the column, bar, pie piece or table row you selected. After you generate drill-down reports, you can navigate between the top-level report and its drill-down reports by clicking Forward and Back in the Report window. Note: Allow a few seconds for the full report data to load when you generate a report or navigate between reports. Once the data is loaded, you can view pop-up menus for drill-down reports and any report counts on the chart report formats. About incident/event reports Some reports list incidents, event types, and base events. Incidents are categories of related event types, and derive their names from the highest priority event type correlated to the incident.