The File Info Chart displays a bar graph of all file transfers that occurred on the source IP or the destination IP addresses for the current search query. Check or clear the filter checkboxes to refine your results and display only the file types of interest.
For each host IP graphed, the chart displays the number of documents transferred. Hover over this number to view additional metadata, attachments, reconstruct the event, and view the JSON file. To view and analyze the file transfer activity on the source or destination IP addresses, perform the following steps:
Click the Add Component button and select the File Info.
Name the widget and click Add Component.
Click the search in the Query Bar to run your query and display the results.
(Optional) Click on the Settings icon to configure the Event Table size. You can display between 1-5000 connection events in the chart.
(Optional) Check or clear the filter checkboxes within the chart panel to refine your results.