Difference between revisions of "KHIKA App for Symantec Antivirus"
Onkar pawar (talk | contribs) (→Elements in the Dashboard are explained below :) |
Onkar pawar (talk | contribs) (→Elements in the Dashboard are explained below :) |
||
| Line 307: | Line 307: | ||
|Contribution of Risk Name | |Contribution of Risk Name | ||
|Names and contribution of Risk on which SEP can not action | |Names and contribution of Risk on which SEP can not action | ||
| + | |- | ||
|IP Address wise Risks | |IP Address wise Risks | ||
|X axis : IP Address<br/> | |X axis : IP Address<br/> | ||
Revision as of 08:14, 19 June 2019
Contents
- 1 How to check the output of KHIKA Symantec Antivirus App ?
- 1.1 Symantec Antivirus Downloaded Content Update Failed Dashboard
- 1.2 Symantec Antivirus Virus Found Dashboard
- 1.3 Symantec Antivirus Malware Information Dashboard
- 1.4 Symantec Antivirus Scan Complete with Risk Dashboard
- 1.5 Symantec Antivirus Live Update Error Dashboard
- 1.6 Symantec Antivirus Multiple Virus Found Dashboard
- 1.7 Symantec Antivirus System In Risk Dashboard
- 1.8 Symantec Antivirus SEP Cant Take Action Dashboard
- 1.9 Symantec Antivirus Update Failed Dashboard
How to check the output of KHIKA Symantec Antivirus App ?
Symantec Antivirus Downloaded Content Update Failed Dashboard
Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. This dashboard gives information about on which computer content downloaded successfully but update failed. Details like Server Name,Computer Name,from where downloaded is shown in an analytical fashion. You can filter and search information and create new ones too. For help with Dashboards, click here
Elements in the Dashboard are explained below :
| Visualization | Description |
| Contribution Of Servers | Contribution of Server for Downloaded content update failed event. |
| Contribution of Computer | Contribution of Computer for Downloaded content update failed event. |
| Count Of Server wise downloaded from | X axis : All the Server which contain downloaded content update failed events Y axis : Stacked within each bar (ie. for each download from) the Server and count of events |
| Count Of Computer wise downloaded from | X axis : All the Computer which contain downloaded content update failed events Y axis : Stacked within each bar (ie. for each download from) Computer and count of events |
| Time trend | Trend of downloaded content update failed events over time. Useful to identify unusual spikes at a glance. X axis : date & time Y axis : count of events |
| Summary Table | Detailed data with timestamp and count |
Suggestion for useful interaction with this dashboard could be :
- Click on and select a particular Computer from Contribution of Computer pie. The rest of the visualization reflects all servers,downloaded from,server etc info with this Computer. How to remove this filter is explained here
Symantec Antivirus Virus Found Dashboard
Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. Critical files in your system are monitored for any change / edit and real time alerts are fired if any such incident, as well as displayed, on this monitoring dashboard. You can filter and search information and create new ones too. For help with Dashboards, click here
Elements in the Dashboard are explained below :
| Visualization | Description |
| Contribution of Action pie - | Which are the actions when Virus found |
| Contribution of Computer Name | Computer Names on which virus Found |
| Contribution of Server | Servers Name on which virus found |
| Contribution of User | Users Name when virus were found |
| IP Address wise Risk Name count | X axis : All IP Address for which virus were found Y axis : IP Address wise Risk name and its count. |
| Server wise Risk Name count | X axis :All the Symantec Antivirus Servers for which virus were found Y axis : Server Name wise Risk and its count |
| Time trend | Trend of virus found events over time. Useful to identify unusual spikes at a glance. X axis : date & time Y axis : count of events |
| Summary Table | Detailed data with timestamp and count |
A suggestion for useful interaction with this dashboard could be :
- Click on and select a particular computer from contribution of Computer Name pie. The rest of the visualization reflects all user,action ,risk etc this computer.
- For further drill down click on and select particular action in Contribution of Actual Action pie. Now rest of the visualization reflects for this Action.In Summary table will see all events for this particular computer name and action which is the Risk Name,Server,IP Address etc.
Symantec Antivirus Malware Information Dashboard
Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. This dashboard gives summary of which malware's found and its daily count.Details like which is the Risk Name, Risk Count ,Category Type etc is shown in the analytical fashion.
You can filter and search information and create new ones too. For help with Dashboards, click here
Elements in the Dashboard are explained below :
| Visualization | Description |
| Contribution of Risk Name | Contribution of All Risk Name |
| Contribution of Category Type | Contribution of All Category type for Malware events |
| Category Type wise Risk Name count | X axis : All category Type in Malware events Y Axis : Category Type wise Risk Name and ts event count |
| Risk Name wise Count | X axis : All the Risk Name Y axis : Each Risk Count |
| Daily trend | Trend of daily malware event count. Useful to identify unusual spikes at a glance. X axis : date & time Y axis : count of events |
| Summary Table | Detailed data with timestamp and count |
Some suggestions for useful interaction with this dashboard could be :
Click on and select a particular Risk from contribution of Risk Name Name pie. The rest of the visulaisation reflects for this Risk.
Symantec Antivirus Scan Complete with Risk Dashboard
Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. This report gives On which computer when scan was started and ends.Number of risk in scan and how many risk are omitted.
You can filter and search information and create new ones too. For help with Dashboards, click here
Elements in the Dashboard are explained below :
| Visualization | Description |
| Contribution of Computers | Computers on which scan completed |
| Contribution of Groups | Group Name which are in Scan |
| Contribution of Servers | Serves on which scan is done |
| IP Address Wise Count | X axis : All the IP Address in Scan Y axis : IP Address wise risk count |
| Begin Time Daily trend | Trend of when scan begin over time. Useful to identify unusual spikes at a glance. X axis : date & time Y axis : count of events |
| End Time Daily trend | Trend of when sacn ends over time. Useful to identify unusual spikes at a glance. X axis : date & time Y axis : count of events |
| Summary Table | Detailed data with timestamp and count |
Some suggestions for useful interaction with this dashboard could be :
- Click on and select a particular computer from contribution of Computer pie. The rest of the visualization reflects all Server,Group, IP address etc info for this computer.
- For further drill down click on and select particular Group in Contribution of Group pie. Now rest of the visualization reflects for this Action.In Summary table will see all events for this particular Computer and Group when scan is started and end ,found risk count,omitted risk count etc..
Symantec Antivirus Live Update Error Dashboard
Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. This Dashboard gives on which computer when error occurred during live update activity.
You can filter and search information and create new ones too. For help with Dashboards, click here
Elements in the Dashboard are explained below :
| Visualization | Description |
| Contribution of Server | Contribution of Servers(which added in KHIKA) |
| Contribution of Computer Name | Contribution of Computer on which error occurred during live update |
| Contribution of Error | Contribution of Error which occurred in live update activity. |
| Computer Wise Error count | X axis : All computer name in live update activity Y axis : Computer wise each error and its count |
| Daily Trend | Trend of login events over time. Useful to identify unusual spikes at a glance. X axis : date & time Y axis : count of events |
| Summary Table | Detailed data with timestamp and count |
A suggestion for useful interaction with this dashboard could be :
- Click on and select a particular Computer from Contribution of Computer name. The rest of the visualization reflects all Error,Update Type etc info for this Computer.
- For further drill down click on and select particular Error in Contribution of Error Pie. Now rest of the visualization reflects for this Error also.
Symantec Antivirus Multiple Virus Found Dashboard
Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. This dashboard gives information about multiple virus found on same machine.
You can filter and search information and create new ones too. For help with Dashboards, click here
Elements in the Dashboard are explained below :
| Visualization | Description |
| Contribution of computer | Names and contribution of the permissions given |
| Computer wise Risks | X axis : computer Name on which multiple virus found Y axis : Virus found on each Computer. |
| Time trend | Trend of multiple virus found on same machine over time. Useful to identify unusual spikes at a glance. X axis : date & time Y axis : count of events |
| Summary Table | Detailed data with timestamp and count |
A suggestion for useful interaction with this dashboard could be :
Click on and select a particular Computer from Contribution of Computers. The rest of the visualization reflects all Error,Update Type etc info for this Computer.
Symantec Antivirus System In Risk Dashboard
Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. This Dashboard gives summary information about on particular computer which risk found and each risk count on daily basis
You can filter and search information and create new ones too. For help with Dashboards, click here
Elements in the Dashboard are explained below :
| Visualization | Description |
| Contribution of Computer | Name and Contribution of Computer on which Risk Found |
| Contribution of Risk Name | Name and Contribution of Risks |
| IP Address wise RiskName | X axis : IP address Y axis : Computer wise each Risk and its count |
| Computer wise RiskName | X axis : Computer Name Y axis : Computer wise each Risk and its count |
| Daily Trend | Trend of daily risk found over time. Useful to identify unusual spikes at a glance. X axis : date & time Y axis : count of events |
| Summary Table | Detailed data with timestamp and count |
Some suggestions for useful interaction with this dashboard could be :
- Click on and select a particular Risk from Contribution of Risk Name. The rest of the visualization reflects Computer,IP Address etc info for this Risk.
- For further drill down click on and select particular computer in Contribution of Computer Name Pie. Now rest of the visualization reflects for this Error also.
Summary table shows info for this particular risk and computer like IP Address,total count of Risk etc.
Symantec Antivirus SEP Cant Take Action Dashboard
Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. This dashboard gives information about virus for which Symantec Endpoint Protection can not take nay action.Detail like Risk name,computer,IP Address etc. is shown in Analytical Fashion.
You can filter and search information and create new ones too. For help with Dashboards, click here
Elements in the Dashboard are explained below :
| Visualization | Description |
| Contribution of Computer Names | Name of the computer on which virus found and SEP can not action |
| Contribution of Servers | Contribution of Symantec AV Servers |
| Contribution of Risk Name | Names and contribution of Risk on which SEP can not action |
| IP Address wise Risks | X axis : IP Address Y axis : IP Address wise Risk found on which SEP can not take action and each risk count . |
| Time trend | Trend of SEP can not take action events over time. Useful to identify unusual spikes at a glance. X axis : date & time Y axis : count of events |
| Summary Table | Detailed data with timestamp and count |
A suggestion for useful interaction with this dashboard could be :
Click on and select a particular Risk Name from contribution of Risk Name pie. The rest of the visualization reflects all Computer,IP Address etc. info with this Risk Name.
Symantec Antivirus Update Failed Dashboard
Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. This dashboard gives information about update failed for to load or install.
You can filter and search information and create new ones too. For help with Dashboards, click here
Elements in the Dashboard are explained below :
| Visualization | Description |
| Contribution of Computer Names | Name Computer and Contribution for which update failed |
| Contribution of Servers | Contribution of Symantec AV Servers |
| Contribution of Errors | Contribution of Error : Failed to Load and Failed to Install |
| Computer Wise Update Count | X axis : Computer Name Y axis : Computer wise update type which is failed and its event count. |
| Time trend | Trend of SEP can not take action events over time. Useful to identify unusual spikes at a glance. X axis : date & time Y axis : count of events |
| Summary Table | Detailed data with timestamp and count |
A suggestion for useful interaction with this dashboard could be :
- Click on and select a particular Computer from Contribution of Computer name. The rest of the visualization reflects all Error,Update Type etc info for this Computer.
- For further drill down click on and select particular Error in Contribution of Error Pie. Now rest of the visualization reflects for this Error also.
