Cisco Cisco Firepower Management Center 4000
4-7
FireSIGHT System User Guide
Chapter 4 Using the Context Explorer
Understanding the Context Explorer
Hover your pointer over any part of the graph to view more detailed information. Click any part of the
graph to filter or drill down on that information.
graph to filter or drill down on that information.
Note
If you filter on intrusion event information, the Traffic by Source IP graph is hidden.
This graph draws data primarily from the Connection Events table.
Viewing the Traffic by Source User Graph
License:
FireSIGHT
The Traffic by Source User graph, in bar form, displays counts of network traffic (in kilobytes per
second) and unique connections for the top 15 most active source users on your monitored network. For
each source IP address listed, blue bars represent traffic data and red bars represent connection data.
second) and unique connections for the top 15 most active source users on your monitored network. For
each source IP address listed, blue bars represent traffic data and red bars represent connection data.
Hover your pointer over any part of the graph to view more detailed information. Click any part of the
graph to filter or drill down on that information.
graph to filter or drill down on that information.