2 Replies Latest reply on Dec 10, 2012 4:46 AM by gabriel_86

    Alarm Dashboard

    gabriel_86

      Hi All,

      I'm working to a POC for a customer that is really interested on the SIEM. Anybody knows if there is some possibility to do a dashboards that simply report in real-time "Alarm Count" in base of the Alarm Name and/or their Severity ecc ecc... Unfortunately the "Alarm Tab" in the SIEM not do it properly and the possibility of create reports by pdf is not very useful for my goal. Any idea?

      Thanks to all,

      Best Wishes

      Gabriele

        • 1. Re: Alarm Dashboard
          kcole

          There are a couple of ways to see the alarms that have triggered within the McAfee SIEM. The easiest way is to look at the Triggered Alarms Dashboard. 

          Screen Shot 2012-12-05 at 9.37.34 AM.png

          Additionally, you can show triggered alarms in a component and build views using them.  To do this, you select the type of query you want (like summary) and filter on Device Type.  Select McAfee > Triggered Alarms for the Device Type filter. 

          Screen Shot 2012-12-05 at 9.39.09 AM.png

           

          Hope this helps.

           

          Kara

          • 2. Re: Alarm Dashboard
            gabriel_86

            Hi Kara!

            Sorry for my late reply....

            Perfect!! Thanks a lot! This was what i needed!

            Gabriele

             

            Messaggio modificato da gabriel_86 on 10/12/12 4.45.30 CST

             

            on 10/12/12 4.46.02 CST