Enterasys Intrusion Prevention System, Reporting Manual

Page: 57 / 122

Top N Reports Selecting the Top N Report Type
Enterasys IPS Analysis and Reporting Guide 4-3
Figure 4-2 Selecting the Top N Report Type
Table 4-1 lists the available Top N reports.
Table 4-1 Top N Reports
Report Description
Events by Event Group Charts, by number of events, the top “N” event groups over the
time period specified by the
Filter value. The value of “N” is 10 by
default, but can be changed in the Top field.
Events by Score Charts the events grouped by severity score over the time period
specified by the
Filter value.
Events by Source Address Charts the top “N” source addresses generating events over the
time period specified by the
Filter value. The value of “N” is 10 by
default, but can be changed in the Top field.
Events by Source Port Charts the top “N” source ports generating events over the time
period specified by the
Filter value. The value of “N” is 10 by
default, but can be changed in the Top field.
Events by Destination Address Charts the top “N” destination addresses of events over the time
period specified by the
Filter value. The value of “N” is 10 by
default, but can be changed in the Top field.
Events by Destination Port Charts the top “N” destination ports of events over the time period
specified by the
Filter value. The value of “N” is 10 by default, but
can be changed in the Top field.
Events by Protocol Charts the top “N” protocols of generated events over the time
period specified by the
Filter value. The value of “N” is 10 by
default, but can be changed in the Top field.
Most Events by Sensor Charts the top “N” sensors receiving the most events over the time
period specified by the
Filter value. The value of “N” is 10 by
default, but can be changed in the Top field.
Least Events by Sensor Charts the top “N” sensors receiving the least events over the time
period specified by the
Filter value. The value of “N” is 10 by
default, but can be changed in the Top field.