The Big Movers monitor enables you to view the attacks whose frequency has increased during a selected time period. For example, if you select the time period as Last 7 days on the Dashboard tab and the current date is 27, the trend is calculated by comparing attacks in the last 7 days (dates 21 to 27) with attacks in the previous 7 days (dates 14 to 20).
.png "GUID-367C8EAB-72F0-4E6C-8A05-287C192032B0-low.png")
Each bar in the monitor represents the percentage increase in the attack count. Hovering over the bar for an attack, displays the following information:
Attack Name - Name of the attack
Attack Severity - Severity of the attack
Baseline Analysis Window Count - Total count of the attack in the previous time window
Dashboard Analysis Window Attack Count - Total count of the attack in the recent time window
Attack Count Increase - Total increase in the attack count. This is the difference between the Dashboard Analysis Window Attack Count value and the Baseline Analysis Window Count value.
Note
Clicking on a bar in the monitor displays the corresponding attack details the Analysis → <Admin Domain Name> → Threat Explorer page.
For an attack to be displayed in the Big Movers monitor, the attack count should be greater than or equal to the minimum threshold value. The default minimum threshold value is 100. You can customize the value by clicking on the Edit monitor settings icon (.png)
) and set any value starting from 1 to 100000.
.png "GUID-0812E031-F2D0-40A2-8057-9AB39D47812D-low.png")
The following options in the first drop-down list are available in the monitor to view the attacks based on severity.
Any Severity - Displays attacks with any severity
High Severity - Displays only high severity attacks
Medium Severity - Displays only medium severity attacks
Low Severity - Displays only low severity attacks
The following options in the second drop-down list are available in the monitor to view the attacks based on result:
Any result - Displays both blocked and unblocked attacks over a period of time
Blocked - Displays blocked attacks over a period of time
Unblocked - Displays unblocked attacks over a period of time