Analyzing Log Data

Now that the behavior investigation log files have been sent to the analysis workstation (that is, the CSA MC), you can continue the process of investigating the target application. The continuation of your investigation procedure takes place on the CSA MC. When the job in the list displays a status of Log Data Available for Analysis, you can select the job by clicking its name, as shown in Figure 11-7.

Figure 11-7. Behavior Investigation Job Status Listing

After you have selected the job and entered the configuration page, notice that a new button has appeared at the bottom of the page: the Start Analysis ...

Get Cisco Security Agent now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.