Log Collection Summary

The log summary screen is a record of logs from all SOCaaP - Alerts/Escalations sources. For example, logs collected from SOCaaP sensors placed on your network.

• Click 'Log Collection Summary' on the left and select a customer at top-right:

• Results are shown for the past seven days by default. Click the date above the table to view a different time frame.

• The summary panel shows the log source and the total number of logs from that source. You can use these logs to generate graphs for the selected time period:

• Event Type – Name of the log source. Each source creates logs for different types of event

• Event Count – Total number of logs from the source for the selected time-period

Log Collection Distribution and Log Source Distribution

• Select one or more log sources in the 'Log Collection Summary' table on the left

• Click 'Draw Charts':

The log collection and source distribution charts are shown on the right:

Log Collection Distribution – Line chart. Shows how many logs were generated per-day from your sources, over your selected time period.

Log Source Distribution – Pie Chart. Shows the total logs collected from your selected sources, over your selected time period. Each segment represents the total logs from a particular source.

• Click a source name under the chart to remove its data from the graphic. Click the name again to re-add the data.

• Place your mouse cursor over a pie segment or date to view more details: