About the timeline
When you perform a search, you can select a time-range to search within for events and incidents. When the search results are returned, a timeline histogram is displayed. The timeline is scaled to the time-range. Each bar of the histogram relates to one 24 hour period. The height of the bar represents the relative number of events occurring for that day. Moving your cursor over a bar shows the actual number of events. Clicking on the bar displays specific details. By default, these details are:
- The time the event occurred ("Time")
- Event Type ID
- Description of the event ("Description")
- The device where the event occurred ("Device")
You can add additional columns to the results using the column selector located at the far right, under the timeline.