Cisco Cisco FirePOWER Appliance 7030
4-27
FireSIGHT System User Guide
Chapter 4 Using the Context Explorer
Understanding the Context Explorer
Hover your pointer over any part of the graph to view more detailed information. Click any part of the
graph to filter or drill down on that information.
graph to filter or drill down on that information.
Tip
To constrain the graph so it displays only countries acting as the responder in connections, hover your
pointer over the graph, then click
pointer over the graph, then click
Responder
on the toggle button that appears. Click
Initiator
to return to
the default view. Note that navigating away from the Context Explorer also returns the graph to the
default Initiator view.
default Initiator view.
This graph draws data primarily from the Connection Summary Data table.
Viewing the Intrusion Events by Source/Destination Country Graph
License:
FireSIGHT
Supported Defense Centers:
Any except DC500
The Intrusion Events by Source/Destination Country graph, in donut form, displays a proportional view
of the countries involved in intrusion events on your network as either the source of the event (the
default) or the destination. The inner ring groups these countries together by continent. For information
about geolocation information, see
of the countries involved in intrusion events on your network as either the source of the event (the
default) or the destination. The inner ring groups these countries together by continent. For information
about geolocation information, see
. For information about intrusion
event data, see