CS-MARS Request: Filter dashboard attack diagram

Unanswered Question
Aug 17th, 2007

On my setup the attack diagram displays green events as well as yellow and red, thus giving a very cluttered graph.

Unless this feature is already implemented I would like to have the option to filter the events shown in the attack diagram and only see the red ones.

As I understand one option is to have MARS drop the green events using drop rules but I don't like this idea and would much rather have MARS filter whats shown instead of whats processed.

What do you folks think?


Regards

Fredrik Hofgren

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Loading.
hoffa2000 Thu, 08/23/2007 - 23:15

Yes. MARS can filter events in the event manager as the first link shows. However this does not change the way incidents are displayed in the attack diagram.

Actions

This Discussion