topic Stealthwatch Cloud - Session details missing in Security Analytics

Stealthwatch Cloud - Session details missing

JuliaMora15110 — Tue, 07 Jun 2022 15:57:48 GMT

Has Stealthwatch Cloud alerting changed? For example, I’m trying to review an alert that triggered. Normally, to see the network events associated, there used to be a blue clickable link at the TimeDate and that would bring up the specific network details for that alert.

This appears to be now missing or defunct. Please advise how we are supposed to review the specific session details.

Re: Stealthwatch Cloud - Session details missing

Philipp Tannich — Thu, 04 Aug 2022 10:04:38 GMT

Hi @JuliaMora15110, I hope I got your question correct:

Can you please go to your Alerts section and click on the alert you want to have more details on, on "Observation"

And then you see the alert again with the time stamp where you can click on "Session Traffic"

Is the next page what you're looking for?

You can also go to this with Monitor > Event Viewer, but then you have to manually drill down to your alert.

Hope this helps,
cheers