H3C Technologies H3C SecCenter UTM Manager - Manual (Page 157)

149
CAUTION:
Logs are aggregated at 3 o’clock in the morning every day. When you query event information of the
current month, the system displays only the data collected from the first day of the month to the day before
the current day.
Displaying virus event details
This function helps you quickly find the desired virus event information from history data of months. The
event information can be exported to an HTML, Word, or Excel file.
From the navigation tree of the IPS management component, select Virus Event Details under Event
Analysis to enter the virus event details page, as shown in Figure 141 . This page allows you to query virus
events by event name, type, severity, source IP address, destination IP address, source port, and protocol
to view the virus event details. Table 125 describes the query options of virus event details. Table 126
describes the fields of the virus event details.
Figure 141 Virus event details
Table 125 Virus event details query options
Option Description
Filter Select a filter to display specific virus events.
Type Select the event type. The default is --, which means any virus type.
Device
Select a device, a device group, or All devices from the Device dropdown list. The system will
display the relevant event information. All devices and device groups that are under your
management will appear in the dropdown list.
Selecting a device group specifies all devices in the device group. Selecting a device name
specifies a single device.