Using the drill-down mode

The drill-down chart displays the current level and score of the objects that are directly beneath the selected object in the summary branch. For example, if you select a policy in the summary branch, the drill-down chart displays the security level and score of the modules that are in that policy.

You can expand the tree and access successively lower levels of information. You can access the information by clicking the nodes that are next to the objects in the summary branch. You can access the information also by clicking the colored portions of the chart or chart legend.

Figure: Drill-down chart illustrates a drill-down chart. This chart displays the results of a Phase 1 policy execution on an agent.

Figure: Drill-down chart

Drill-down chart

The drill-down chart lets you see which objects need the most attention. Red objects pose the greatest threat and should be addressed first, followed by yellow objects. Green objects generally require no action.

In addition to red, yellow, and green security levels, the chart may contain black bars, which indicate the lack of data. This means that the related object has no summary data to contribute to the chart.

The drill-down chart graphs the contents of the Level and Rating columns in the grid. These ratings indicate an object's conformity to a policy.

Figure: Components of the drill-down chart illustrates the components of a drill-down chart.

Figure: Components of the drill-down chart

Components of the drill-down chart

By default, the option to view the object data as a drill-down chart is disabled, since the chart may take several minutes to get generated.

You can enable the option to view a drill-down chart from the View menu. You can also specify the minimum and the maximum datapoints that Symantec ESM considers while drawing a chart.

To specify the drill-down datapoints

  1. On the console task bar, click View > Drill-Down Datapoints....

  2. On the Drill-down Chart Options window, check Show Drill-down Chart.

  3. In the Specify minimum datapoints to ask for confirmation before drawing the chart text box, enter the minimum number of datapoints in an object that ESM should draw the chart for. If the number of datapoints is more than this value, ESM asks for a confirmation to proceed with the chart with the specified datapoints.

  4. In the Specify maximum datapoints after which the chart will not be displayed text box, enter the maximum number of datapoints for drawing the chart. The console does not draw any drill-down chart if the number of datapoints exceeds the number that you specify.

To view object data

  1. On either the console task bar, click View > Drill-down mode.

    The following warning message is displayed when Symantec ESM creates the chart for the first time:

    Drill-down charts for some objects may take time. Do you want to continue?

  2. Click Yes to continue.

  3. Do the following to expand the tree and access the relevant object in the summary branch:

    • Click the node icons next to the objects in the summary branch.

    • Click the colored portions of the chart or chart legend.

More Information

Using the summary mode

Using the trend mode