19-24
User Guide for Cisco Security MARS Local Controller
78-17020-01
Chapter 19 Incident Investigation and Mitigation
Layer 2 Path and Mitigation Configuration Example
Figure 19-19
Query Event Data screen
Step 2
After you
Apply
changes to and
Submit
your query, the
Query Results screen
appears.
Figure 19-20
Query Results screen
Step 3
In the
Query Results screen
, in the same row as the Event Type you want to examine (in this example we
use Windows RPC DCOM Overflow), click the icon under the Graph column to view the topology paths.
The first topology path to appear is the
Layer 3 topology graph
:
