Device Summary

The Device Summary is EventLog Analyzer's analytical console to view the overall device summary events and contextual data. Users can find the machine summary and event summary for the selected period, top active users, file monitoring events, device severity events, and alerts summary.

Access:

Users can access the Device Summary from multiple dashboards of EventLog Analyzer such as Reports, Log Source, Alerts, Incidents and others.

From Log Source

From Reports

From Incident dashboard

Analysis

Other than the device summary, based on the configurations, users can also access activity overview for the configured web servers, databases, endpoint security solutions, and vulnerability scanners.

SQL Overview

IIS Overview

FireEye Overview

OpenVas Overview

1. Device list dropdown - Click on the dropdown option and select from the list of devices to analyze.



2. Click on the arrows to proceed to the previous device or next device.
3. Click on specific users in the Top 5 Currently Active Users section to view the Interactive Sessions History with domain details, session details, and events history.

Click on Details in the Interactive Sessions History popup to view the individual Event Details containing Event ID, Process Name, Domain details and Access Rights