On the overview page and when clicking on a row in the pane "Top triggered host_fqdns" the Computer Drilldown appears. The graph seems to work fine, but the "related raw logs" pane is empty some times. It seems to be due to the query is limited to show sysmon events only, not including regular windows events, which the dashboard in the previous view is also based on.
On the overview page and when clicking on a row in the pane "Top triggered host_fqdns" the Computer Drilldown appears. The graph seems to work fine, but the "related raw logs" pane is empty some times. It seems to be due to the query is limited to show sysmon events only, not including regular windows events, which the dashboard in the previous view is also based on.