H3C Technologies H3C SecCenter Firewall Manager - Manual (Page 57)

51
Figure 48 Top 10 attack events contrast graph
You can click the link to export all the analysis reports that the event overview function
provides.
CAUTION:
Logs are aggregated at 3 o’clock every day. When you query event information of the current month, the
system displays only the data collected from the first day of the month to the day before the current day.
Event details
The Firewall Manager provides the powerful query function, which helps you quickly find the desired
security event information from history data of months.
Configuration guide
1. From the navigation tree of the firewall management component, select Event Details under Event
Analysis to enter the attack event details page, as shown in Figure 49 .
2. Query attack events by event name, type, severity, source IP, destination IP, destination port, and
protocol to view the event details.
Table 54 describes the event details query options. Table 55
describes the fields of the attack event details list.