Event Queue Tab

The Event Queue tab displays all events added to your queue using the Add to Queue button. On the Event Queue tab, you can search for and work with events in your queue.

MyEventQueueTab.png

Tip

Users often add events that provide evidence of suspicious or malicious activity to their queue.

Events on the Event Queue tab remain in your queue until you remove them from the queue. However, since the event is now in your queue, it can only be searched for in the Event Queue tab – it is no longer searchable in the All Events tab.

Search for Events

You can search for specific events in the Event Queue tab. For more information, see Search for Events.

Event Details

Each event added to the queue includes metadata related to the action the event records. The event details displayed depend on the source of the event. For more information, see All Events Tab > Event Details.

View an Event's JSON
  1. Log into F5 Distributed Cloud App Infrastructure Protection (AIP).
  2. Click Events, then click Queue. The Queue page displays.
  3. Hover your cursor over the event for which to view the JSON. The action bar displays.
  4. Click the View JSON button.
    view-json.png

    The Event JSON dialog opens.


    EventJSONDialog.png

Remove an Event from Queue

Remove events from your queue when they are no longer relevant to your workflow. If the event is still within the three day retention period, then it redisplays on the All Events tab. If the event is outside of the three day retention period, then, if the event is not tied to an alert, it is removed from Distributed Cloud AIP.

  1. Log into Distributed Cloud AIP.
  2. Click Events, then click Queue. The Queue page displays.
  3. Hover your cursor over the event to remove from the queue. The action bar displays.
  4. Click the Remove Event button. The event no longer displays in the queue.
    remove-event.png

Related Articles

Was this article helpful?
0 out of 0 found this helpful