The Threat View tab includes all data that was previously published in the old Security Report and displays it in a highly usable format. The Threat View tab provides comprehensive security data about the malicious hits within your networks over a specific time period. The default report displays a bar chart that shows the distribution of malicious hits throughout your networks within a 24-hour time frame by default but can be customized to display a specific time period. Export. The default file name is security-activity_threat-insight.csv. Exported data is limited to 50,000 records. To To export the Threat View table data in csv format, click Export. The default file name is security-activity_threat-view.csv. Exported data is limited to 10,000 records.
...
- REQUESTS: The number of detections associated with the report. Clicking on a record's number of detections will display a table of the detections associated with the target domain.
- DEVICES: The devices that triggered the hits. Clicking the number of devices in the DEVICE column associated with a user allows you to pivot off the record and display all devices associated with the user.
- PROPERTY: The property or nature of the threat. By default, the portal includes all threat properties.
USERS: The users that triggered the event. For remote offices, the portal displays Unknown for these users. If you have configured access authentication, this displays the authenticated user who triggered the event.
Note title Note You can enable and disable custom fields by clicking on the icon located in the top, right-hand corner of the table, and selecting or deselecting which custom fields you want to view. All fields can be selected or deselected, or they can be returned to the default configuration by clicking Restore to default GRID setting.
Export Records
Click Export to download a CSV file of report records. The maximum number of exported Threat View report records is 10,000.