Cisco CS-MARS-20-K9 - Security MARS 20, Руководство пользователя

Страница: 401 / 588

20-9
User Guide for Cisco Security MARS Local Controller
78-17020-01
Chapter 20 Queries and Reports
Queries
Selecting Query Criteria
To Select a Criterion
Step 1 Select the criteria that you want to edit by clicking it.
Figure 20-11 Clicking any to narrow your criteria
Step 2
Move the items that you want to query from the right to the left of the filter by selecting the check box
next to them, and clicking the Equal and Not Equal buttons.
Figure 20-12 Selecting Variables
Step 3
You can select a variety of different variables, events, devices, addresses from the filter page. The
following number correspond with the numbers in the preceding graphic:
1.
Check the boxes next to the items in the Sources Selected field to select them, and click the Toggle
Equal button to change them between equal and not equal.
2.
Click the Select All button to select all items in the Sources Selected field. (Note: if you have items
highlighted in the Sources Selected field, clicking Select All will de-select them.)
3.
Use the Equal and Not Equal buttons to bring highlighted items from the Sources Available field
into the Sources Selected field.
4.
Filter sources from this drop-down list.
143442
5
1 2 4 3
12
6
8 10
11
9
7