Cisco Cisco FirePOWER Appliance 7115
Version 5.3
Sourcefire 3D System User Guide
1451
Working with Discovery Events
Understanding Discovery Event Workflows
Chapter 35
When you are using a network discovery workflow, you can perform many
common actions, whatever the type of event. These common functions are
described in the
Common Discovery Event Actions
T
O
...
Y
OU
CAN
...
view the host profile for an IP address
click the host profile icon (
) or, for hosts with active
indications of compromise (IOC) tags, the compromised host
icon (
icon (
) that appears next to the IP address. For information
on IOC, see
view user profile information
click the user icon (
) that appears next to the user identity.
For more information, see
sort data
click the column title. Click the column title again to reverse
the sort order.
drill down to the next page in the
workflow
use one of the following methods:
• To drill down to the next workflow page constraining on a
• To drill down to the next workflow page constraining on a
specific value, click a value within a row. Note that this only
works on drill-down pages. Clicking a value within a row in
a table view only constrains the table view and does not
drill down to the next page.
• To drill down to the next workflow page constraining on
some events, select the check boxes next to the events
you want to view on the next workflow page, then click
View.
• To drill down to the next workflow page keeping the
current constraints, click View All.
TIP!
Table views always include “Table View” in the page
name.
For more information, see
For more information, see
constrain the columns that appear
click the close icon (
) in the column heading that you want
to hide. In the pop-up window that appears, click Apply.
TIP!
To hide or show other columns, Select or clear the
appropriate check boxes before you click Apply. To add a
disabled column back to the view, click the expand arrow to
expand the search constraints, then click the column name
under Disabled Columns.
navigate within the current workflow
page
find more information in