Viewing Associated Offenses
From the Log Activity tab, you can view the offense that is associated with the event.
If an event matches a rule, an offense can be generated on the Offenses tab.
For more information about rules, see the Juniper Secure Analytics Administration Guide.
When you view an offense from the Log Activity tab, the offense might not display if the Magistrate has not yet saved the offense that is associated with the selected event to disk or the offense has been purged from the database. If this occurs, the system notifies you.
- Click the Log Activity tab.
- Optional. If you are viewing events in streaming mode, click the Pause icon to pause streaming.
- Click the Offense icon beside the event you want to investigate.
- View the associated offense.