Displaying an event group

Expand an event group to display the events that have been correlated together within the group.

About this task

An event group contains two or more events correlated together by the underlying analytics. The group can include Temporal group icon Temporal groups, Topological group icon Topological groups, and Scope-based group icon Scope-based groups.
Note: Events might be marked as being eligible for group membership, but the synthetic parent event is not created until there are at least two events.

Procedure

  1. Identify an event group within the table.
    You can identify a group using the following signs:
    • It has a Down chevron icon Downward-pointing chevron icon in its row in the table.
    • By default, it has a summary that includes the words: GROUP (n active events), where n is the number of the events in the group.
  2. Open the event group by clicking the Down chevron icon Downward-pointing chevron icon in its row in the table.
    The group's events are now displayed under the parent event.