38. Reports » Devices » Filters

Clicking on a Filter anywhere in Console opens a tab with specific information. The tab includes a few sub-tabs located at the lower side of the window. Every sub-tab shares the following common toolbar fields:

Filters – Select the Filters you are interested in, or select All. Administrators can restrict which Filters are accessible by guest accounts
Time Range – Select a predefined time range, or select Custom… to enter a specific time interval

38.1. Filter Dashboard

In this sub-tab you can view the most relevant data collected by Filters in the form of widgets. The configuration of the Filter Dashboard does not apply to a particular Filter, so the changes you make here are visible for other Filter Dashboards as well. The operation of dashboards is described in the Reports » Dashboards chapter.

The configuration of Filter widgets is outlined in the following paragraphs.

38.2. Filter Graphs

In this sub-tab you can view a variety of Filter-related histograms for the selected Filter(s):

Data Units – Select one or more data units:
Most Used – Frequently-used data units
Anomalies – Anomalies mitigated by the selected Filter(s)
Filtering Rules – Filtering rules detected by the selected Filter(s)
SW Firewall Rules – Filtering rules applied by Netfilter
HW Firewall Rules – Filtering rules applied by the Hardware Offload functionality of the NIC
Source IPs – Unique IP addresses that sent traffic to the attacked destination(s)
CPU% – Maximum percentage of CPU resources used by the selected Filter(s)
Used RAM – Amount of RAM used by the selected Filter(s)
Filtered Packets – How many packets were reported as blocked
Filtered Bits – How many bits were reported as blocked
Dropped Packets – Rate of packets dropped by the packet capturing engine of the selected Filter(s)
Received Packets – Rate of packets received by the selected Filter(s)
Packets/s – Rate of packets analyzed by the selected Filter(s)
Bits/s – Throughput analyzed by the selected Filter(s)
Filtering Rules – Filtering rules found for each filtering rule type
Total Excepted Rules – Whitelisted filtering rules
Size – Select a predefined graph dimension or enter a custom one in a “<X> x <Y>” format, where <X> and <Y> are the X-axis and Y-axis pixels
Title – Graphs have an automatically-generated title for Auto, no title for None, or you can enter your own text to be rendered as a title
Legend – Select the level of detail for the graph legend
Consolidation – If you are interested in spikes, choose the MAXIMUM aggregation type. If you are interested in average values, choose AVERAGE. If you are interested in low values, choose the MINIMUM aggregation type
Grouping
Filters – Select to generate a single graph for the selected Filters
Stacking
Filters – Select to view the summed up, stacked values for multiple Filters

38.3. Filter Events

In this sub-tab you can see the events generated by the selected Filter(s) during the specified time range.

38.4. Filter Instances

Lists statistics collected by each Filter instance.

38.5. Filtering Rules Archive

Lists filtering rules detected by the selected Filter(s) during the specified time range. Most fields are described in the Reports » Tools » Anomalies chapter.

38.6. Filtering Rules Distribution

In this sub-tab you can generate pie charts with various filtering rule-related statistics.

38.7. Geo Distribution

Shows an interactive world map with the number of attackers detected for each country, or other similar statistics.