Topics Discussed

In the Detection screen, the Detection score focuses on the incoming activity of Armor services. You can use these scores to determine if Armor is receiving the necessary data to perform useful security checks for your environment. 

For Armor Complete, these services are: 

  • Malware Protection
  • FIM
  • Filebeat (for Linux)
  • Winlogbeat (for Windows)


Widgets and Graph


Widget

Description

Detection Score

This widget calculates a score based on:

  • Armor services that are collecting logs
  • Agents that are powered on

Score range

Health status

10 - 8Good
7 - 4

Fair

3 - 1Poor

Events Analyzed

An event is any log that passes an Armor agent.

Malware Protection, File Integrity Monitoring, and Log and Event Management contain a subagent.

This widget displays data from the previous month.

Services Reporting

This widget displays the percentage of agents that are receiving events. You can use this number to determine overall if your subagents are running properly.

Detection Score Trend

This graph displays the history of your detection scores.





Detection Events 


The Detection Events table displays information for the past seven days. This table will update every day. 

Column

Description

Date

This column displays the date that Armor received the log.
Total EventsThis column displays the number of logs received for that day.
CategoryThis column displays the type of log received from the Total Events column. This column lists the subagent for the collected logs.






Related Documentation 




Was this helpful?
Your Rating: Results: 1 Star2 Star3 Star4 Star5 Star 4 rates