Hunt with Drop-down Icon
- Log in to the LogRhythm NDR UI.
- Click the Incidents tab.
- Select any incident timestamp.
The Incidents/Details page appears. - In the Hunt/ Activity section, click the drop-down icon near the search icon.
The drop-down menu displays the following:- All sessions related to this incident
- All activities of this host
- All activities of this user
- To filter the information based on all sessions related to the incident, select All sessions related to this incident.
The graph displays all sessions related to this incident during the time range. - To filter the information based on all activities of this host, select All activities of this host.
The graph displays all the events on the incident. If events do not display, you can change the time range.
If you have a host for the respective incident, it will filter and show the related events. Similarly, you can select All activities of this user.
If you have a user for the respective incident, it will filter and show the related events.