Kaspersky Unified Monitoring and Analysis Platform

Viewing event detail areas

In KUMA, you can inspect the parameters of any event in your selection, which can help during alert investigation or when working with correlation rules.

To see event parameters,

In the Events section of the KUMA web interface, click the relevant event.

The Event details area appears in the right part of the web interface window and contains a list of the event's parameters with values. In this area you can:

• To modify the event sample you can use and icons located next to parameter values.
• Open the service that registered the event using the link in the Service parameter value.
• Open a window containing information about the asset if it is mentioned in the event fields and registered in the program.
• Link the event to an alert if the program is in analysis drilldown mode.
• Open the Details on correlation event window if the event you selected is a correlation event.
• If integration with Kaspersky CyberTrace and/or Kaspersky Threat Intelligence Portal is configured, view and request information about objects in the event fields from these sources.