Cisco Cisco Firepower Management Center 4000
16-16
FireSIGHT System User Guide
Chapter 16 Working with Connection & Security Intelligence Data
Working with Connection Graphs
•
explains how to recenter a line graph around
any point in time.
•
explains how to change the data displayed on a connection
graph by changing its x- or y-axis.
•
explains how you can detach a connection graph into a
new browser window and perform further analysis without affecting the default time range for the
Defense Center.
Defense Center.
•
explains how to export the connection data used to
construct a graph as a CSV (comma-separated values) file.
Changing the Graph Type
License:
Any
There are three different connection graphs: line graphs, bar graphs, and pie charts. Line graphs plot data
over time. For example, the following line graph displays the total number of connections detected on a
monitored network over a one-hour time span. Traffic profiles are always displayed as line graphs.
over time. For example, the following line graph displays the total number of connections detected on a
monitored network over a one-hour time span. Traffic profiles are always displayed as line graphs.
By default, line graphs appear in standard view. A standard line graph aggregates data over five minute
intervals, plots the aggregated data points, and connects the points.
intervals, plots the aggregated data points, and connects the points.
However, you can change a line graph from standard view to velocity view. A velocity line graph shows
the rate of change between those data points. If you change the above graph to a velocity graph, the
y-axis changes from indicating the number of connections to indicating the change in the number of
connections over time.
the rate of change between those data points. If you change the above graph to a velocity graph, the
y-axis changes from indicating the number of connections to indicating the change in the number of
connections over time.