8e6 Technologies Threat Analysis Reporter TAR HL/SL/MSA - Manual (Page 9)

C HAPTER 2: D RILL D OWN INTO A URL G AUGE S TEP 2: V IEW C HILD G AUGES
8 E 6 T ECHNOLOGIES , T HREAT A NALYSIS R EPORTER E VALUATION G UIDE
5
Time Span
Each gauge monitors events in real-time for a window of time between one and 60
minutes. This time span is customizable by the administrator. For example, if a
gauge is set for 15 minutes, that gauge will indicate the number of page hits for the
last 15 minutes of time. For example, if the current time is 12:00, the gauge score
will reflect all activity from 11:45 to 12:00. Once the time is 12:01, the gauge will
reflect all activity from 11:46 to 12:01.
Threat Level
The colored threat level indicates the current state of threat based on the custom-
izable ceiling created by the administrator. For example, if the administrator
creates a gauge with a threshold of 100, when the score reaches 67 the gauge dial
will move into the red section of the dial and the score number will turn red and
begin to flash. These gauges are designed to provide an intuitive reminder when a
specific category gauge is experiencing abnormal levels of activity so the adminis-
trator can react quickly.
Step 2: View Child Gauges
Sometimes a single child gauge is responsible for driving a parent gauge’s score.
To view child gauges, you can either double-click the parent gauge or right-click
the parent gauge and then select “View Gauge Details”. In this example, select the
“Security” gauge.
Select the Security parent gauge
Performing either of the two aforementioned actions on this parent gauge will open
a window containing all child gauges associated with that gauge.