You can investigate events related to intrusion detection units (AC fail, Unit lost, Intrusion detection unit input trouble, and so on), using the Intrusion detection unit events task.
Procedure
- From the homepage, open the Intrusion detection unit events task.
-
Set up the query filters for your report. Choose one or more of the following
filters:
- Intrusion detection units
- Select the intrusion detection units to investigate.
- Event timestamp
- Define the time range for the query. You can define the time range for a specific period or a relative period, such as the previous week or the previous month.
- Events
- Select the events of interest. The available event types depend on the task you are using.
- Custom fields
- Restrict the search to a predefined custom field for the entity. This filter only appears if custom fields are defined for the entity, and if the custom field was made visible to you when it was created or last configured.
-
Click Generate report.
The intrusion detection unit events are listed in the report pane.