Cisco Cisco Firepower Management Center 4000

Page of 1844
 
47-28
FireSIGHT System User Guide
 
Chapter 47      Understanding and Using Workflows 
  Using Workflows
Step 1
On a workflow constrained by time, click the time range icon (
).
The Date/Time window appears.
Step 2
On the 
Time Window
 tab, set the time window as described in th
 table.
Tip
Click 
Reset
 to change the time window back to the default settings.
Step 3
Click 
Apply
.
The window closes and the event view page displays events from the new time range.
Changing the Default Time Window for Your Event Type
License: 
Any
During your event analysis, you can use the Preferences tab on the Date/Time window to change the 
default time window for the type of event you are viewing without having to use the event view settings 
(see 
).
Keep in mind that changing the default time window in this way changes the default time window for 
only the type of event you are viewing. For example, if you configured multiple time windows, changing 
the default time window on the Preferences tab changes the settings for either the events, health 
monitoring, or audit log window, in other words, whichever time window is indicated by the first tab. If 
you configured a single time window, changing the default time window on the Preferences tab changes 
the default time window for all types of events.
The following graphic shows the Defense Center version of the Preferences tab, on an appliance that has 
multiple time windows configured.