All Events Tab

The All Events tab displays every single event ingested by the F5 Distributed Cloud App Infrastructure Protection (AIP) within the specified date range. On the All Events tab, you can filter and work with events.

Note

Distributed Cloud AIP retains events for three days. Events that trigger an alert are retained for 365 calendar days.

Search for Events

For more information, see Search for Events.

Event Details

Each event ingested by Distributed Cloud AIP includes metadata related to the action the event records. The event details displayed depend on the source of the event.

event-details-1.png

  1. Date and Time and Source Icon – The date and time at which the event entered Distributed Cloud AIP. The icon indicates the source of the event (Distributed Cloud AIP Agent, CloudTrail, Kubernetes, or Windows).
  2. Icon – Indicates the source of an event. This is a quick way to visually distinguish events of particular importance to your workflow.
  3. Metadata – The data collected by Distributed Cloud AIP about the event. The source of the event determines the data collected.

    event-details-2.png

You can perform the following actions from an event:

  • Create a rule based on the event
  • View the JSON file for the event
  • Add events to the Queue page
  • Add event metadata to your search query
Create a Rule from an Event
  1. Log into Distributed Cloud AIP.
  2. Click Events. The All Events page displays.
  3. Hover your cursor over the event from which to create a rule. The action bar displays.

    create-rule-icon.png

  4. Click the Create Rule button. The Add New [type of rule] Rule dialog opens.

    AddNewRuleDialog.png

  5. Follow the instructions in Rule Creation Overview for the type of rule to create the new rule.
View an Event's JSON
  1. Log into Distributed Cloud AIP.
  2. Click Events. The Events screen displays.
  3. Hover your cursor over the event for which to view the JSON. The action bar displays.

    json-icon.png

  4. Click the View JSON button. The Event JSON dialog opens.

    EventJSONDialog.png

Add Event to My Event Queue Tab

Click the Add to My Queue button to add an event to the Queue page. For more information, see Event Queue.

  1. Log into Distributed Cloud AIP.
  2. Click Events. The Events page displays.
  3. Hover your cursor over the event to add to the Queue page. The action bar displays.

    add-to-queue-icon.png

  4. Click the Add to My Queue button. A message displays in the lower right corner of the screen informing you that the event has been added to the Queue page. From now on, you can only search for the event on the Queue page.

Related Articles

Was this article helpful?
0 out of 0 found this helpful