Viewing the Content of Event Tracking Tables


Event Tracking Tables can only be used within correlation scenarios. You can add a new event tracking table only while setting up a scenario.

Under Policy > Event Tracking Tables, you see an overview of the existing tables in active correlation scenarios.

Here, you can click on the number in the Counts column to see the content of the respective event tracking table.

ETT overview

Overview of event tracking tables in a correlation scenario.

A content view opens. Note that the maximum number of displayed entries is 64.

ETT content

Content of an event tracking table that records MAC addresses per IP address.

If you want to delete the content of the event tracking table, click RESET STATE in this view.

Additional References: