Cisco Cisco FirePOWER Appliance 8390
16-24
FireSIGHT System User Guide
Chapter 16 Working with Connection & Security Intelligence Data
Working with Connection Graphs
Detaching Connection Graphs
License:
Any
If you want to perform further analysis on a connection graph, without affecting the default time range,
you can detach the graph into a new browser window. You can perform all the same actions on detached
connection graphs that you can on embedded connection graphs. You can also print a detached graph by
clicking
you can detach the graph into a new browser window. You can perform all the same actions on detached
connection graphs that you can on embedded connection graphs. You can also print a detached graph by
clicking
Print
. Note that traffic profile graphs are, by default, detached graphs.
Tip
If you are viewing a detached graph, click
New Window
to create another copy of the detached graph in
a new browser window. You can then perform different analyses on each of the detached graphs.
To detach a graph:
Access:
Admin/Any Security Analyst
Step 1
Click
Detach
.
Exporting Connection Data
License:
Any
You can easily share connection data with others by exporting it as a CSV (comma-separated values) file.
Tip
You can also save a connection graph as an image by right-clicking on the graph and following your
browser’s prompts.
browser’s prompts.
Table 16-7
Y-Axis Functions
To...
You can...
graph the number of connections on the monitored network by the
criterion you chose for the x-axis
criterion you chose for the x-axis
click
Y-Axis
and select
Connections
.
graph the total kilobytes transmitted on the monitored network by the
criterion you chose for the x-axis
criterion you chose for the x-axis
click
Y-Axis
and select
KBytes
.
graph the total kilobytes per second transmitted on the monitored
network by the criterion you chose for the x-axis
network by the criterion you chose for the x-axis
click
Y-Axis
and select
KBytes Per
Second
.
graph the total number of packets transmitted on the monitored
network by the criterion you chose for the x-axis
network by the criterion you chose for the x-axis
click
Y-Axis
and select
Packets
.
graph the total number of unique hosts detected on the monitored
network by the criterion you chose for the x-axis
network by the criterion you chose for the x-axis
click
Y-Axis
and select
Unique
Hosts
.
graph the total number of unique application protocols detected on
the monitored network by the criterion you chose for the x-axis
the monitored network by the criterion you chose for the x-axis
click
Y-Axis
and select
Unique
Application Protocols
.
graph the total number of unique users detected on the monitored
network by the criterion you chose for the x-axis
network by the criterion you chose for the x-axis
click
Y-Axis
and select
Unique
Users
.