KHIKA App for Symantec Antivirus

From khika
Revision as of 08:14, 19 June 2019 by Onkar pawar (talk | contribs) (Elements in the Dashboard are explained below :)
Jump to navigation Jump to search

Contents

How to check the output of KHIKA Symantec Antivirus App ?

Symantec Antivirus Downloaded Content Update Failed Dashboard

Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. This dashboard gives information about on which computer content downloaded successfully but update failed. Details like Server Name,Computer Name,from where downloaded is shown in an analytical fashion. You can filter and search information and create new ones too. For help with Dashboards, click here

Elements in the Dashboard are explained below :

Elements in "Symantec Antivirus Downloaded Content Update Failed" Dashboard
Visualization Description
Contribution Of Servers Contribution of Server for Downloaded content update failed event.
Contribution of Computer Contribution of Computer for Downloaded content update failed event.
Count Of Server wise downloaded from X axis : All the Server which contain downloaded content update failed events

Y axis : Stacked within each bar (ie. for each download from) the Server and count of events

Count Of Computer wise downloaded from X axis : All the Computer which contain downloaded content update failed events

Y axis : Stacked within each bar (ie. for each download from) Computer and count of events

Time trend Trend of downloaded content update failed events over time. Useful to identify unusual spikes at a glance.

X axis : date & time
Y axis : count of events
Summary Table Detailed data with timestamp and count

Suggestion for useful interaction with this dashboard could be :

  1. Click on and select a particular Computer from Contribution of Computer pie. The rest of the visualization reflects all servers,downloaded from,server etc info with this Computer. How to remove this filter is explained here

Symantec Antivirus Virus Found Dashboard

Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. Critical files in your system are monitored for any change / edit and real time alerts are fired if any such incident, as well as displayed, on this monitoring dashboard. You can filter and search information and create new ones too. For help with Dashboards, click here

Elements in the Dashboard are explained below :

Elements in "Symantec Antivirus Virus Found" Dashboard
Visualization Description
Contribution of Action pie - Which are the actions when Virus found
Contribution of Computer Name Computer Names on which virus Found
Contribution of Server Servers Name on which virus found
Contribution of User Users Name when virus were found
IP Address wise Risk Name count X axis : All IP Address for which virus were found

Y axis : IP Address wise Risk name and its count.

Server wise Risk Name count X axis :All the Symantec Antivirus Servers for which virus were found

Y axis : Server Name wise Risk and its count

Time trend Trend of virus found events over time. Useful to identify unusual spikes at a glance.

X axis : date & time
Y axis : count of events
Summary Table Detailed data with timestamp and count

A suggestion for useful interaction with this dashboard could be :

  1. Click on and select a particular computer from contribution of Computer Name pie. The rest of the visualization reflects all user,action ,risk etc this computer.
  2. For further drill down click on and select particular action in Contribution of Actual Action pie. Now rest of the visualization reflects for this Action.In Summary table will see all events for this particular computer name and action which is the Risk Name,Server,IP Address etc.


Symantec Antivirus Malware Information Dashboard

Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. This dashboard gives summary of which malware's found and its daily count.Details like which is the Risk Name, Risk Count ,Category Type etc is shown in the analytical fashion.

You can filter and search information and create new ones too. For help with Dashboards, click here

Elements in the Dashboard are explained below :

Elements in "Symantec Antivirus Malware Information" Dashboard
Visualization Description
Contribution of Risk Name Contribution of All Risk Name
Contribution of Category Type Contribution of All Category type for Malware events
Category Type wise Risk Name count X axis : All category Type in Malware events

Y Axis : Category Type wise Risk Name and ts event count

Risk Name wise Count X axis : All the Risk Name

Y axis : Each Risk Count

Daily trend Trend of daily malware event count. Useful to identify unusual spikes at a glance.

X axis : date & time
Y axis : count of events
Summary Table Detailed data with timestamp and count


Some suggestions for useful interaction with this dashboard could be :

Click on and select a particular Risk from contribution of Risk Name Name pie. The rest of the visulaisation reflects for this Risk.

Symantec Antivirus Scan Complete with Risk Dashboard

Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. This report gives On which computer when scan was started and ends.Number of risk in scan and how many risk are omitted.

You can filter and search information and create new ones too. For help with Dashboards, click here

Elements in the Dashboard are explained below :

Elements in "Symantec Antivirus Scan Complete with Risk" Dashboard
Visualization Description
Contribution of Computers Computers on which scan completed
Contribution of Groups Group Name which are in Scan
Contribution of Servers Serves on which scan is done
IP Address Wise Count X axis : All the IP Address in Scan

Y axis : IP Address wise risk count

Begin Time Daily trend Trend of when scan begin over time. Useful to identify unusual spikes at a glance.

X axis : date & time
Y axis : count of events
End Time Daily trend Trend of when sacn ends over time. Useful to identify unusual spikes at a glance.

X axis : date & time
Y axis : count of events
Summary Table Detailed data with timestamp and count


Some suggestions for useful interaction with this dashboard could be :

  1. Click on and select a particular computer from contribution of Computer pie. The rest of the visualization reflects all Server,Group, IP address etc info for this computer.
  2. For further drill down click on and select particular Group in Contribution of Group pie. Now rest of the visualization reflects for this Action.In Summary table will see all events for this particular Computer and Group when scan is started and end ,found risk count,omitted risk count etc..

Symantec Antivirus Live Update Error Dashboard

Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. This Dashboard gives on which computer when error occurred during live update activity.

You can filter and search information and create new ones too. For help with Dashboards, click here

Elements in the Dashboard are explained below :

Elements in "Symantec Antivirus Live Update Error" Dashboard
Visualization Description
Contribution of Server Contribution of Servers(which added in KHIKA)
Contribution of Computer Name Contribution of Computer on which error occurred during live update
Contribution of Error Contribution of Error which occurred in live update activity.
Computer Wise Error count X axis : All computer name in live update activity

Y axis : Computer wise each error and its count

Daily Trend Trend of login events over time. Useful to identify unusual spikes at a glance.

X axis : date & time
Y axis : count of events
Summary Table Detailed data with timestamp and count

A suggestion for useful interaction with this dashboard could be :

  1. Click on and select a particular Computer from Contribution of Computer name. The rest of the visualization reflects all Error,Update Type etc info for this Computer.
  2. For further drill down click on and select particular Error in Contribution of Error Pie. Now rest of the visualization reflects for this Error also.

Symantec Antivirus Multiple Virus Found Dashboard

Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. This dashboard gives information about multiple virus found on same machine.

You can filter and search information and create new ones too. For help with Dashboards, click here

Elements in the Dashboard are explained below :

Elements in "Symantec Antivirus Multiple Virus Found" Dashboard
Visualization Description
Contribution of computer Names and contribution of the permissions given
Computer wise Risks X axis : computer Name on which multiple virus found

Y axis : Virus found on each Computer.

Time trend Trend of multiple virus found on same machine over time. Useful to identify unusual spikes at a glance.

X axis : date & time
Y axis : count of events
Summary Table Detailed data with timestamp and count

A suggestion for useful interaction with this dashboard could be :

Click on and select a particular Computer from Contribution of Computers. The rest of the visualization reflects all Error,Update Type etc info for this Computer.

Symantec Antivirus System In Risk Dashboard

Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. This Dashboard gives summary information about on particular computer which risk found and each risk count on daily basis

You can filter and search information and create new ones too. For help with Dashboards, click here

Elements in the Dashboard are explained below :

Elements in "Symantec Antivirus System In Risk" Dashboard
Visualization Description
Contribution of Computer Name and Contribution of Computer on which Risk Found
Contribution of Risk Name Name and Contribution of Risks
IP Address wise RiskName X axis : IP address

Y axis : Computer wise each Risk and its count

Computer wise RiskName X axis : Computer Name

Y axis : Computer wise each Risk and its count

Daily Trend Trend of daily risk found over time. Useful to identify unusual spikes at a glance.

X axis : date & time
Y axis : count of events
Summary Table Detailed data with timestamp and count

Some suggestions for useful interaction with this dashboard could be :

  1. Click on and select a particular Risk from Contribution of Risk Name. The rest of the visualization reflects Computer,IP Address etc info for this Risk.
  2. For further drill down click on and select particular computer in Contribution of Computer Name Pie. Now rest of the visualization reflects for this Error also.

Summary table shows info for this particular risk and computer like IP Address,total count of Risk etc.

Symantec Antivirus SEP Cant Take Action Dashboard

Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. This dashboard gives information about virus for which Symantec Endpoint Protection can not take nay action.Detail like Risk name,computer,IP Address etc. is shown in Analytical Fashion.

You can filter and search information and create new ones too. For help with Dashboards, click here

Elements in the Dashboard are explained below :

Elements in "Symantec Antivirus SEP Cant Take Action" Dashboard
Visualization Description
Contribution of Computer Names Name of the computer on which virus found and SEP can not action
Contribution of Servers Contribution of Symantec AV Servers
Contribution of Risk Name Names and contribution of Risk on which SEP can not action
IP Address wise Risks X axis : IP Address

Y axis : IP Address wise Risk found on which SEP can not take action and each risk count .

Time trend Trend of SEP can not take action events over time. Useful to identify unusual spikes at a glance.

X axis : date & time
Y axis : count of events
Summary Table Detailed data with timestamp and count

A suggestion for useful interaction with this dashboard could be :

Click on and select a particular Risk Name from contribution of Risk Name pie. The rest of the visualization reflects all Computer,IP Address etc. info with this Risk Name.

Symantec Antivirus Update Failed Dashboard

Go to "Dashboards" from the left menu. From the list of in-built dashboards, select this one. It shall open the Dashboard. This dashboard gives information about update failed for to load or install.

You can filter and search information and create new ones too. For help with Dashboards, click here

Elements in the Dashboard are explained below :

Elements in "Symantec Antivirus Update Failed" Dashboard
Visualization Description
Contribution of Computer Names Name Computer and Contribution for which update failed
Contribution of Servers Contribution of Symantec AV Servers
Contribution of Errors Contribution of Error : Failed to Load and Failed to Install
Computer Wise Update Count X axis : Computer Name

Y axis : Computer wise update type which is failed and its event count.

Time trend Trend of SEP can not take action events over time. Useful to identify unusual spikes at a glance.

X axis : date & time
Y axis : count of events
Summary Table Detailed data with timestamp and count

A suggestion for useful interaction with this dashboard could be :

  1. Click on and select a particular Computer from Contribution of Computer name. The rest of the visualization reflects all Error,Update Type etc info for this Computer.
  2. For further drill down click on and select particular Error in Contribution of Error Pie. Now rest of the visualization reflects for this Error also.