Forum Discussion
When do items show on the Potential malicious events map?
CliveWatson that is the issue. When I run the query in the Logs page I get data but nothing shows up on the Potential Malicious events map. Does it ignore the time range selected at the top of the page as I had to go back a while to get data when running the query in the Logs page.
1. Yes its using the Time Picker Parameter (called [TimeRange] ). So in this screenshot you would see any data from the last 7days.
2. If you EDIT the workbook, and swap the visualization (see red arrow) from MAP to GRID do you still see data, when you "run query"? I do a Top 10 on the very last line, you can comment that out to see more data (if any).
CliveWatson If it is better to take this offline let me know and I will post the results here.
If you have circles on the map its working, you may also need to edit the default Lat and Long - as I set it to our office (the distances are calculated from there (in Miles) to the location we see the MaliciousIP). I seemed to have missed that on the instructions - sorry!
I'm planning to add a few major cities to the drop down's so you can select a default location - or add your own.
CliveWatson Looking more into the queries on the page, If load the Finished Query (almost) I get no data returned because the MaliciousIP is always empty.
Which, I guess, brings me back to my original question (more or less), how would that field get filled in? 🙂