Events are used to identify and keep track of significant activities on the network and on Cisco Cyber Vision. It can be an activity, a property or a change whether it concerns software or hardware parts.

For instance, an event can be:

• A wrong password entered on Cisco Cyber Vision's GUI.

• A new component which has been connected to the network.

• An anomaly detected on the Monitor Mode.

• A component detected as vulnerable.

Events are visible in the Events page.

New events may be generated when the database is updated (in real-time or each time an offline capture is uploaded to Cisco Cyber Vision) with a severity level (Critical, High, Medium and Low) customizable through the Events administration page. For more information, refer to the Cisco Cyber Vision Administration Guide.