Observer GigaFlow

Documentation

Table of Contents

Observer GigaFlow Documentation

Documentation > How-To Guide for GigaFlow > Conducting Searches in GigaFlow > Search for Security Events Associated with an IP Address

Search for Security Events Associated with an IP Address

To find out more about a particular IP address:

  • Enter an IP address in the main GigaFlow Search box at the top of the screen.
  • Click Go.
  • Select a reporting period and click Submit Forensics check and submit icon..

Click on Either in the Flowsec Events section in the panel on the left side of the screen.

The infographics and tables display all the security events associated with that IP address during the reporting period.

See Search and Events in the Reference Manual for more.