Look around events

From the Event Analysis view, you can look for events that match one or more of the fields in the event in the time frame you select.

On Trellix ESM, click the views list, then select Event Views → Event Analysis.
Click an event, click the menu icon , then click Look Around.
Select the number of minutes before and after the time of the event that you want the system to search for a match.
Click Select filter, select the field that you want the search to match on, then type the value.
The results are displayed on the Look Around Results view.
Note
If you leave this view, then want to return to it later, click Event Analysis → Last Look Around.